Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN[.]JP[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP.zip
Size

305.9MB
MD5

e978122616e65f2575e0509819455270
SHA1

68c65a321363b33a93cea51f441eeee6230adc08
SHA256

2b5e255af21dbf4b80ae0d8b2d54b7c2fab3c1bc001d4b94da2fa6494b074ce4
SHA512

95427544b5d4cf4c86271512c701a2a2fdea52fa397152c815d633cb22e000e6806d26ee33b553f2c2998eead1f8f426077f21c7916aa6a1aebdfe62008e6598
SSDEEP

6291456:K5sCUdWoCGv2cYTWvCqcmpWSbv2RrHFjIdp74BDyT3QNON2tb/KDENe:FtWYPYTWvCO8Sbv2xVC4tNON2tbCQNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/custom.exe
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/custom_e.exe
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/eosd.exe
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/kouma_update102h.EXE
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06_english_patch_0.8.exe
unpack001/Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e.exe

Files

Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP.zip
.zip
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_01.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_01.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_02.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_02.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_03.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_03.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_04.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_04.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_05.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_05.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_06.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_06.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_07.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_07.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_08.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_08.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_09.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_09.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_10.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_10.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_11.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_11.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_12.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_12.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_13.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_13.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_14.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_14.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_15.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_15.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_16.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_16.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_17.sfk
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/bgm/th06_17.wav
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/custom.exe
.exe windows:4 windows x86

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

user32

DialogBoxParamA
GetDlgItemTextA
KillTimer
EndDialog
IsDlgButtonChecked
MessageBoxA
SetTimer
GetDlgItem
SendMessageA
SetDlgItemTextA
GetWindowLongA

kernel32

LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetEndOfFile
HeapSize
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
ReadFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/custom.txt
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/custom_e.exe
.exe windows:4 windows x86

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

user32

DialogBoxParamA
GetDlgItemTextA
KillTimer
EndDialog
IsDlgButtonChecked
MessageBoxA
SetTimer
GetDlgItem
SendMessageA
SetDlgItemTextA
GetWindowLongA

kernel32

LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetEndOfFile
HeapSize
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
ReadFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/eosd.exe
.exe windows:4 windows x86

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

dsound

ord11

d3d8

Direct3DCreate8

winmm

mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance

kernel32

GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

user32

DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA

gdi32

SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/kouma_update102h.EXE
.exe windows:4 windows x86

52c60479654e645ae5b6f545b927e90e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CloseHandle
GlobalFree
GetModuleFileNameA
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
MoveFileA
GlobalLock
FindClose
FindFirstFileA
lstrcpyA
GetLastError
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
lstrcatA
lstrlenA
DeleteFileA
LoadLibraryA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetStdHandle
GetFileType
HeapCreate
GetProcAddress
GetWindowsDirectoryA
GetCurrentProcess
RtlUnwind
GetCPInfo
FreeEnvironmentStringsW
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

SendDlgItemMessageA
SetDlgItemTextA
GetMessageA
DispatchMessageA
GetDesktopWindow
DestroyWindow
wsprintfA
PeekMessageA
TranslateMessage
MessageBoxA
PostQuitMessage
ShowWindow
CreateDialogParamA

shell32

ShellExecuteA

comctl32

ord17

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 783B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/log.txt
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/readme.txt
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/readme_english.txt
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/score.dat
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06_english_patch_0.8.exe
.exe windows:4 windows x86

1cf4252ebbb4f173d97a6ef4f79a60b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

kernel32

ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
WaitForSingleObject
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
GlobalFree
MulDiv
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
SetFilePointer
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
lstrcpynA

user32

ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PeekMessageA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e.cfg
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e.exe
.exe windows:4 windows x86

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

dsound

ord11

d3d8

Direct3DCreate8

winmm

mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance

kernel32

GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

user32

DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA

gdi32

SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_CM.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_ED.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_IN.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_MD.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_ST.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/Game Files/th06e_TL.DAT
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/OldGamesDownload.url
.url
Touhou_6_Embodiment_of_Scarlet_Devil_Win_RIP_EN.JP/ReadMe.txt

Sharing

General

Malware Config

Signatures

Files

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

Imports

dinput8

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 48KB - Virtual size: 47KB

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

Imports

dinput8

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 52KB - Virtual size: 48KB

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

Imports

dinput8

dsound

d3d8

winmm

kernel32

user32

gdi32

Sections

.text Size: 420KB - Virtual size: 418KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 24KB - Virtual size: 2.4MB

.rsrc Size: 4KB - Virtual size: 2KB

52c60479654e645ae5b6f545b927e90e

Headers

File Characteristics

Imports

kernel32

user32

shell32

comctl32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 783B

.data Size: 3KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

1cf4252ebbb4f173d97a6ef4f79a60b5

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 108KB

.ndata Size: - Virtual size: 32KB

.rsrc Size: 7KB - Virtual size: 8KB

17b55a57ba1d7e45de0a854174eb9c8f

Headers

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 48KB - Virtual size: 47KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 52KB - Virtual size: 48KB

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 24KB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 783B

.data
Size: 3KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 108KB

.ndata
Size: - Virtual size: 32KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 24KB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 3KB