UMK3 y otros con Online[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

UMK3 y otros con Online.zip
Size

59.8MB
MD5

3b5bc7e1bb8eec1f2faa882594c1873a
SHA1

b31cb874dedaaf12646b47b08659a407caf2ca49
SHA256

365457bf01ac01effd6d1ffc58128863425b7fd4022f26d9785dcf662a3bb5dc
SHA512

917a3e101129460270ced3cc8e994e406d2cdc6184862ec9f297697fcb5a8e1fc234e2781ad8ae0a00939002b672c8a083c86c2d50a5ed0b72802a2f1de82d77
SSDEEP

1572864:K5rzVyRAbydm1U1bp2pipWOwLczLjI7VMuYhE/x:KfIE2rkDqLjpuGE5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Mame.064+roms MK y umk3 con Online/mame32k.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mame.064+roms MK y umk3 con Online/kailleraclient.dll
unpack001/Mame.064+roms MK y umk3 con Online/mame32k.exe

Files

UMK3 y otros con Online.zip
.zip
Mame.064+roms MK y umk3 con Online/Desktop.ini
Mame.064+roms MK y umk3 con Online/IMKO.jpg
.jpg
Mame.064+roms MK y umk3 con Online/LEEME IMPORTANTE.txt
Mame.064+roms MK y umk3 con Online/Thumbs.db
Mame.064+roms MK y umk3 con Online/cfgwin/default.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mk.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mk2.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mk2chal.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mk2r32.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mk3.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mkla1.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mkla4.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/mkprot9.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/sf2accp2.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/sf2ce.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/sf2eg.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/sf2t.cfg
Mame.064+roms MK y umk3 con Online/cfgwin/umk3.cfg
Mame.064+roms MK y umk3 con Online/cheat.rar
.rar
cheat.dat
Mame.064+roms MK y umk3 con Online/defaultkeysCPS.ini
Mame.064+roms MK y umk3 con Online/defaultkeysMVS.ini
Mame.064+roms MK y umk3 con Online/ini/dirs.ini
Mame.064+roms MK y umk3 con Online/ini/gameback.ini
Mame.064+roms MK y umk3 con Online/ini/games.ini
Mame.064+roms MK y umk3 con Online/ini/guiback.ini
Mame.064+roms MK y umk3 con Online/ini/mame32k.ini
Mame.064+roms MK y umk3 con Online/kailleraclient.dll
.dll windows x86

ac7036ab9f4b5b4137c2616d545425c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateThread
GetCurrentThread
TerminateThread
GetExitCodeThread
Sleep
GetTickCount
GetProcAddress
GetModuleHandleA
WinExec
WritePrivateProfileStringA
_lread
GetFileSize
OpenFile
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
_lwrite
FreeLibrary
LoadLibraryA
GetPrivateProfileStringA
GetPrivateProfileIntA
_lclose
GetCurrentDirectoryA

user32

TranslateMessage
PeekMessageA
wsprintfA
MessageBoxA
SendMessageA
GetWindowTextLengthA
SetWindowTextA
GetDlgItem
MessageBeep
ShowWindow
GetWindowTextA
EndDialog
KillTimer
SetTimer
DialogBoxParamA
GetDlgItemInt
SetDlgItemTextA
SetDlgItemInt
EnableWindow
AppendMenuA
CreatePopupMenu
TrackPopupMenu
InsertMenuItemA
GetCursorPos
GetParent
DispatchMessageA
GetActiveWindow

advapi32

GetUserNameA

shell32

ShellExecuteA

ws2_32

connect
WSAGetLastError
send
recv
WSACleanup
WSAStartup
select
__WSAFDIsSet
recvfrom
sendto
inet_addr
gethostbyname
htons
socket
htonl
bind
ioctlsocket
getsockname
ntohs
getsockopt
setsockopt
shutdown
closesocket

comctl32

InitCommonControlsEx

msvcrt

isalpha
isalnum
time
vprintf
strncat
localtime
strstr
strncmp
atoi
vsprintf
__CxxFrameHandler
strncpy
??2@YAPAXI@Z
free
malloc
realloc
_except_handler3
sprintf
_onexit
_initterm
_adjust_fdiv
__dllonexit

Exports

Exports

_kailleraChatSend@4
_kailleraEndGame@0
_kailleraGetVersion@4
_kailleraInit@0
_kailleraModifyPlayValues@8
_kailleraSelectServerDialog@4
_kailleraSetInfos@4
_kailleraShutdown@0
z00_With
z01_stupidity
z02_even
z03_the
z04_gods
z05_contend
z06_in
z07_vain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mame.064+roms MK y umk3 con Online/keaa.txt
Mame.064+roms MK y umk3 con Online/mame32.lst
Mame.064+roms MK y umk3 con Online/mame32k.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 14.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Mame.064+roms MK y umk3 con Online/n02.ini
Mame.064+roms MK y umk3 con Online/nvram/mk.nv
Mame.064+roms MK y umk3 con Online/nvram/mk2.nv
Mame.064+roms MK y umk3 con Online/nvram/mk2chal.nv
Mame.064+roms MK y umk3 con Online/nvram/mk2r32.nv
Mame.064+roms MK y umk3 con Online/nvram/mk3.nv
Mame.064+roms MK y umk3 con Online/nvram/mkla1.nv
Mame.064+roms MK y umk3 con Online/nvram/mkla4.nv
Mame.064+roms MK y umk3 con Online/nvram/mkprot9.nv
Mame.064+roms MK y umk3 con Online/nvram/umk3.nv
Mame.064+roms MK y umk3 con Online/roms/mk.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/mk2.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/mk2r32.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/mk3.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/sf2.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/sf2ce.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/sf2hf.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/sf2t.zip
.zip
Mame.064+roms MK y umk3 con Online/roms/umk3.zip
.zip
Mame.064+roms MK y umk3 con Online/sample_ini_files.zip
.zip
Mame.064+roms MK y umk3 con Online/snap/Thumbs.db
Mame.064+roms MK y umk3 con Online/uni-bios.rom
Mame.064+roms MK y umk3 con Online/wav/mk2.wav
Mame.064+roms MK y umk3 con Online/wav/umk3_00.wav
Mame.064+roms MK y umk3 con Online/wav/umk3_01.wav
Mame.064+roms MK y umk3 con Online/wav/umk3_02.wav
Mame.064+roms MK y umk3 con Online/wav/umk3_03.wav

Sharing

General

Malware Config

Signatures

Files

ac7036ab9f4b5b4137c2616d545425c8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

comctl32

msvcrt

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 59KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 12KB - Virtual size: 8KB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 14.5MB

UPX1 Size: 3.2MB - Virtual size: 3.2MB

.rsrc Size: 12KB - Virtual size: 16KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 59KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 12KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 14.5MB

UPX1
Size: 3.2MB - Virtual size: 3.2MB

.rsrc
Size: 12KB - Virtual size: 16KB