ColumbineRPG[.]zip

Resubmissions

23/08/2023, 20:00

230823-yq2w8sfc33 7

Sharing

Copy URL Twitter E-mail

General

Target

ColumbineRPG.zip
Size

27.1MB
MD5

5263454c56f862fbb0b215331e2ce6b3
SHA1

8125886e69a28d625b51538b8cefdb75c0b98a71
SHA256

4b722ff914492c59eddd35b3467ed214c07bf8db2b3145d75eb45003bc7434e4
SHA512

f19c9bfba53d8154f192df0a32906f6972bef84f21ce6739b862bf888e11f60488f9ea421bd5ac7a979c60b210324636dd1e6b32e475e49e6b033393dabb546a
SSDEEP

393216:NFrJbebx119OtDckHefcDAf0fLn7v354hPGUyyUfvxmAelabDBKrpqtXM00t1iol:vdsqOfVeL7fGhY3xjP8pCuT2+BD

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe
unpack001/UNLHA32.DLL

Files

ColumbineRPG.zip
.zip
ColumbineRPG.lzh
.lzh
Backdrop/Bathroom.PNG
.png
Backdrop/Cafeteria1.PNG
.png
Backdrop/Cafeteria2.PNG
.png
Backdrop/Gym.PNG
.png
Backdrop/Hallway1.PNG
.png
Backdrop/Hallway2.PNG
.png
Backdrop/Hallway3.PNG
.png
Backdrop/Hell1.PNG
.png
Backdrop/Hell2.PNG
.png
Backdrop/Hell3.PNG
.png
Backdrop/Hell4.PNG
.png
Backdrop/Hell5.PNG
.png
Backdrop/Hell6.PNG
.png
Backdrop/Library1.PNG
.png
Backdrop/Library2.PNG
.png
Backdrop/Library3.PNG
.png
Backdrop/Library4.PNG
.png
Backdrop/ParkingLot.PNG
.png
Backdrop/Thumbs.db
Backdrop/classroom.PNG
.png
Battle/Absorption.png
.png
Battle/Arrow.png
.png
Battle/Axe.png
.png
Battle/Barrier.png
.png
Battle/Cold.png
.png
Battle/Dark.png
.png
Battle/Down.png
.png
Battle/Earth.png
.png
Battle/Etc.png
.png
Battle/Explosion.png
.png
Battle/Fang.png
.png
Battle/Fire1.png
.png
Battle/Fire2.png
.png
Battle/Hit.png
.png
Battle/Holy.png
.png
Battle/Paralysis.png
.png
Battle/Poison.png
.png
Battle/Ray.png
.png
Battle/Spear.png
.png
Battle/Sphere.png
.png
Battle/Sun.png
.png
Battle/Sword1.png
.png
Battle/Sword2.png
.png
Battle/Thumbs.db
Battle/Up.png
.png
Battle/Water.png
.png
Battle/Whip.png
.png
Battle/Wind.png
.png
Battle/Zip.png
.png
CharSet/Animal.png
.png
CharSet/Chara1.png
.png
CharSet/Chara2.png
.png
CharSet/Chara3.png
.png
CharSet/Chara4.png
.png
CharSet/Chubby1.png
.png
CharSet/Chubby2.png
.png
CharSet/Crown1.png
.png
CharSet/Crown2.png
.png
CharSet/Crown3.png
.png
CharSet/Crown4.png
.png
CharSet/Crown5.png
.png
CharSet/Crown6.png
.png
CharSet/Crown7.png
.png
CharSet/Future1.png
.png
CharSet/Future2.png
.png
CharSet/Future3.png
.png
CharSet/Men1.png
.png
CharSet/Monster1.png
.png
CharSet/Monster2.png
.png
CharSet/Object1.png
.png
CharSet/Object2.png
.png
CharSet/People1.png
.png
CharSet/People3.png
.png
CharSet/People4.png
.png
CharSet/People5.png
.png
CharSet/People7.png
.png
CharSet/Thumbs.db
CharSet/Vehicle.png
.png
CharSet/Women1.png
.png
ChipSet/Basis.png
.png
ChipSet/ChipSet1.png
.png
ChipSet/ChipSet2.png
.png
ChipSet/ChipSet3.png
.png
ChipSet/Dungeon.png
.png
ChipSet/Inner.png
.png
ChipSet/Outline.png
.png
ChipSet/Ship.png
.png
ChipSet/Thumbs.db
FaceSet/Thumbs.db
GameOver/Thumbs.db
Monster/Thumbs.db
Movie/Thumbs.db
Panorama/Thumbs.db
Picture/Thumbs.db
Sound/Absorption1.wav
Sound/Absorption2.wav
Sound/Annihilation1.wav
Sound/Annihilation2.wav
Sound/Attack1.wav
Sound/Attack2.wav
Sound/Barrier.wav
Sound/Bell.wav
Sound/Bite.wav
Sound/Blow1.wav
Sound/Blow2.wav
Sound/Blow3.wav
Sound/Blow4.wav
Sound/Blow5.wav
Sound/Blow6.wav
Sound/Blow7.wav
Sound/Bow1.wav
Sound/Bow2.wav
Sound/Breast.wav
Sound/Buzzer1.wav
Sound/Buzzer2.wav
Sound/Cansel1.wav
Sound/Cansel2.wav
Sound/Chaos.wav
Sound/Clock.wav
Sound/Close1.wav
Sound/Close2.wav
Sound/Cold1.wav
Sound/Cold10.wav
Sound/Cold11.wav
Sound/Cold2.wav
Sound/Cold3.wav
Sound/Cold4.wav
Sound/Cold5.wav
Sound/Cold6.wav
Sound/Cold7.wav
Sound/Cold8.wav
Sound/Cold9.wav
Sound/Cursor1.wav
Sound/Cursor2.wav
Sound/Damage1.wav
Sound/Damage2.wav
Sound/Dark1.wav
Sound/Dark2.wav
Sound/Dark3.wav
Sound/Dark4.wav
Sound/Dark5.wav
Sound/Darkness.wav
Sound/Decision1.wav
Sound/Decision2.wav
Sound/Dog.wav
Sound/Down.wav
Sound/Earth1.wav
Sound/Earth10.wav
Sound/Earth2.wav
Sound/Earth3.wav
Sound/Earth4.wav
Sound/Earth5.wav
Sound/Earth6.wav
Sound/Earth7.wav
Sound/Earth8.wav
Sound/Earth9.wav
Sound/Earthquake1.wav
Sound/Escape.wav
Sound/Evasion1.wav
Sound/Evasion2.wav
Sound/Explosion1.wav
Sound/Explosion2.wav
Sound/Explosion3.wav
Sound/Explosion4.wav
Sound/Explosion5.wav
Sound/Explosion6.wav
Sound/Explosion7.wav
Sound/Failure1.wav
Sound/Failure2.wav
Sound/Fall1.wav
Sound/Fall2.wav
Sound/Fight1.wav
Sound/Fight2.wav
Sound/Flame1.wav
Sound/Flame2.wav
Sound/Flame3.wav
Sound/Flame4.wav
Sound/Flame5.wav
Sound/Flame6.wav
Sound/Flame7.wav
Sound/Flame8.wav
Sound/Flash1.wav
Sound/Flash2.wav
Sound/Flash3.wav
Sound/Fog1.wav
Sound/Fog2.wav
Sound/Glass.wav
Sound/Holy1.wav
Sound/Holy2.wav
Sound/Holy3.wav
Sound/Holy4.wav
Sound/Holy5.wav
Sound/Holy6.wav
Sound/Holy7.wav
Sound/Holy8.wav
Sound/Holy9.wav
Sound/Item1.wav
Sound/Item2.wav
Sound/Jump1.wav
Sound/Jump2.wav
Sound/Key.wav
Sound/Kill1.wav
Sound/Kill10.wav
Sound/Kill11.wav
Sound/Kill2.wav
Sound/Kill3.wav
Sound/Kill4.wav
Sound/Kill5.wav
Sound/Kill6.wav
Sound/Kill7.wav
Sound/Kill8.wav
Sound/Kill9.wav
Sound/Knock.wav
Sound/Lion.wav
Sound/Monster1.wav
Sound/Monster2.wav
Sound/Movement.wav
Sound/Numbness1.wav
Sound/Numbness2.wav
Sound/Numbness3.wav
Sound/Open1.wav
Sound/Open2.wav
Sound/Poison.wav
Sound/Pollen.wav
Sound/Power.wav
Sound/Rebirth1.wav
Sound/Rebirth2.wav
Sound/Rebirth3.wav
Sound/Recovery1.wav
Sound/Recovery2.wav
Sound/Recovery3.wav
Sound/Recovery4.wav
Sound/Recovery5.wav
Sound/Recovery6.wav
Sound/Recovery7.wav
Sound/Recovery8.wav
Sound/Refer Book.wav
Sound/Roar.wav
Sound/Sand Storm.wav
Sound/Sea1.wav
Sound/Sea2.wav
Sound/Sheep.wav
Sound/Shot1.wav
Sound/Shot2.wav
Sound/Shot3.wav
Sound/Silence.wav
Sound/Sleep.wav
Sound/Song.wav
Sound/Sonic1.wav
Sound/Sonic2.wav
Sound/Success1.wav
Sound/Success2.wav
Sound/Switch1.wav
Sound/Switch2.wav
Sound/Sword1.wav
Sound/Sword2.wav
Sound/Sword3.wav
Sound/Teleport1.wav
Sound/Teleport2.wav
Sound/Thunder1.wav
Sound/Thunder10.wav
Sound/Thunder2.wav
Sound/Thunder3.wav
Sound/Thunder4.wav
Sound/Thunder5.wav
Sound/Thunder6.wav
Sound/Thunder7.wav
Sound/Thunder8.wav
Sound/Thunder9.wav
Sound/Tiger.wav
Sound/Up.wav
Sound/Wall1.wav
Sound/Wall2.wav
Sound/Water1.wav
Sound/Water2.wav
Sound/Water3.wav
Sound/Water4.wav
Sound/Water5.wav
Sound/Water6.wav
Sound/Wind1.wav
Sound/Wind10.wav
Sound/Wind11.wav
Sound/Wind2.wav
Sound/Wind3.wav
Sound/Wind4.wav
Sound/Wind5.wav
Sound/Wind6.wav
Sound/Wind7.wav
Sound/Wind8.wav
Sound/Wind9.wav
System/Royal.png
.png
System/System.png
.png
System/Thumbs.db
Title/Thumbs.db
README.txt
Setup.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Setup.ini
UNLHA32.DLL
.dll windows x86

269413ebd83199244ecd3163b1cb501b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
GetSystemDirectoryA
GetCurrentDirectoryA
IsDBCSLeadByte
GetDiskFreeSpaceA
SetCurrentDirectoryA
SetFileAttributesA
CreateFileA
GetLastError
FindNextFileA
GetShortPathNameA
SearchPathA
GetWindowsDirectoryA
GetTempPathA
GetFileAttributesA
CompareFileTime
FreeResource
FindClose
FindFirstFileA
SizeofResource
FindResourceA
SetFileTime
MoveFileA
MultiByteToWideChar
FlushFileBuffers
CloseHandle
ReadFile
GetFileSize
GetEnvironmentVariableA
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetVolumeInformationA
CompareStringA
GetVersionExA
GetUserDefaultLangID
GlobalFree
lstrcpyA
GlobalAlloc
GlobalLock
LocalFileTimeToFileTime
FileTimeToLocalFileTime
lstrlenA
SetFilePointer
WriteFile
DosDateTimeToFileTime
GetFileTime
GetModuleFileNameA
DeleteFileA
FileTimeToSystemTime
lstrcmpA
GlobalUnlock
GetPrivateProfileIntA
LockResource
LoadResource
LoadLibraryA
GetEnvironmentStrings
GetEnvironmentStringsW
lstrcpynA
FreeEnvironmentStringsW
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetStdHandle
GetFileType
SetHandleCount
ExitProcess
GetStringTypeW
WideCharToMultiByte
GetStringTypeA
RtlUnwind
HeapDestroy
HeapCreate
GetVersion
GetModuleHandleA
GetProcAddress
GetCommandLineA
HeapAlloc
SetStdHandle
HeapFree
FreeEnvironmentStringsA

user32

RegisterClassA
UnregisterClassA
RegisterWindowMessageA
CharUpperA
CharLowerA
CreateDialogIndirectParamA
CharPrevA
SetForegroundWindow
BringWindowToTop
LoadCursorA
ShowWindow
DialogBoxIndirectParamA
GetClientRect
EndPaint
CreateWindowExA
MoveWindow
GetDC
GetDlgItem
SetActiveWindow
SetRect
MapDialogRect
GetWindowRect
SystemParametersInfoA
GetDesktopWindow
IsWindowVisible
wsprintfA
CharNextA
ReleaseDC
CheckRadioButton
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetCursor
SetCursor
CheckDlgButton
GetDlgItemTextA
EndDialog
SendDlgItemMessageA
MessageBoxA
SendMessageA
InvalidateRect
DestroyWindow
PostMessageA
SetFocus
GetActiveWindow
BeginPaint
UpdateWindow
SetDlgItemTextA
DefWindowProcA
SetWindowTextA
EnableWindow
GetFocus

gdi32

SetTextColor
SelectObject
DeleteObject
GetTextExtentPointA
GetDeviceCaps
GetStockObject
CreateFontIndirectA
ExtTextOutA
SetBkColor

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
RegCreateKeyA

Exports

Exports

DllMain
GetCommentDlgProc
GetFileNameDlgProc
GetWinSFXParamDlgProc
MakeDirMsgDlgProc
OWReadOnlyMsgDlgProc
OverWriteMsgDlgProc
SetLangueEnglish
SetLangueJapanese
Unlha
UnlhaBarWindProc
UnlhaCheckArchive
UnlhaClearEnumMembersProc
UnlhaClearOwnerWindow
UnlhaCloseArchive
UnlhaCompressMem
UnlhaConfigDialog
UnlhaDialogProc
UnlhaExtractMem
UnlhaFindFirst
UnlhaFindNext
UnlhaGetAccessTime
UnlhaGetAccessTimeEx
UnlhaGetArcAccessTimeEx
UnlhaGetArcCompressedSize
UnlhaGetArcCreateTimeEx
UnlhaGetArcDate
UnlhaGetArcFileName
UnlhaGetArcFileSize
UnlhaGetArcOSType
UnlhaGetArcOriginalSize
UnlhaGetArcRatio
UnlhaGetArcTime
UnlhaGetArcWriteTimeEx
UnlhaGetAttribute
UnlhaGetBackGroundMode
UnlhaGetCRC
UnlhaGetCompressedSize
UnlhaGetCreateTime
UnlhaGetCreateTimeEx
UnlhaGetCursorInterval
UnlhaGetCursorMode
UnlhaGetDate
UnlhaGetFileCount
UnlhaGetFileName
UnlhaGetMethod
UnlhaGetOSType
UnlhaGetOriginalSize
UnlhaGetRatio
UnlhaGetRunning
UnlhaGetSubVersion
UnlhaGetTime
UnlhaGetVersion
UnlhaGetWriteTime
UnlhaGetWriteTimeEx
UnlhaIsSFXFile
UnlhaKillOwnerWindowEx
UnlhaLocalDlgProc
UnlhaOpenArchive
UnlhaPrtBarDlgProc
UnlhaQueryFunctionList
UnlhaSetBackGroundMode
UnlhaSetCursorInterval
UnlhaSetCursorMode
UnlhaSetEnumMembersProc
UnlhaSetOwnerWindow
UnlhaSetOwnerWindowEx

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UNLHA32.TXT

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 327KB - Virtual size: 327KB

DATA Size: 4KB - Virtual size: 3KB

BSS Size: - Virtual size: 2KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 23KB - Virtual size: 23KB

.rsrc Size: 105KB - Virtual size: 108KB

269413ebd83199244ecd3163b1cb501b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 99KB - Virtual size: 118KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 14KB - Virtual size: 13KB

CODE
Size: 327KB - Virtual size: 327KB

DATA
Size: 4KB - Virtual size: 3KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 105KB - Virtual size: 108KB

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 99KB - Virtual size: 118KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 14KB - Virtual size: 13KB