?_GameStart@@YAXPAUHWND__@@PBD@Z
?_GameStop@@YAXXZ
?_GetDescAndLoadstep@@YAXPADPAM@Z
?_MsgHandle@@YAXPAUHWND__@@@Z
?_ReGameStart@@YAXPBD@Z
GameStart
GameStop
GetDescAndLoadstep
MsgHandle
ReGameStart
Static task
static1
Behavioral task
behavioral1
Sample
fffa79c84e01445d63e25b2f8797be85a1173c32326604c8236b7dea60743f2a.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fffa79c84e01445d63e25b2f8797be85a1173c32326604c8236b7dea60743f2a.dll
Resource
win10v2004-20230915-en
Target
fffa79c84e01445d63e25b2f8797be85a1173c32326604c8236b7dea60743f2a
Size
627KB
MD5
4aec48334a144b861e5369dddf7d4929
SHA1
9d0ee308316cfb46e23deb91d733bba4a6ffb1f2
SHA256
fffa79c84e01445d63e25b2f8797be85a1173c32326604c8236b7dea60743f2a
SHA512
8ba1dd8fdb1fdfc179c15da400ee382ff76492116ad392e4a83c723629e4dad617b71afda49dc92a6a39caf3ce7dc4943338d0a591cb4ee51d2cf0d550560930
SSDEEP
12288:QLuxTvy6QeJyVwhswrLSF3s6vyBfh1NFxXa10vX4SciH1jOGOBhYGk45Eg+a2QJ:WMoWRrc3swIfhnFxXKCIGaGOBhYGREps
Checks for missing Authenticode signature.
resource |
---|
fffa79c84e01445d63e25b2f8797be85a1173c32326604c8236b7dea60743f2a |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bind
setsockopt
recvfrom
sendto
send
select
__WSAFDIsSet
ioctlsocket
listen
accept
WSAStartup
WSACleanup
gethostname
getaddrinfo
freeaddrinfo
socket
WSASetLastError
closesocket
getsockopt
recv
getpeername
WSAIoctl
connect
htons
ntohs
getsockname
WSAGetLastError
timeGetTime
HeapDestroy
InitializeCriticalSectionAndSpinCount
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
InitializeCriticalSection
LeaveCriticalSection
GetLastError
SetLastError
EnterCriticalSection
DeleteCriticalSection
SleepEx
GetVersionExA
WaitForSingleObject
CloseHandle
ExpandEnvironmentStringsA
Sleep
FormatMessageA
PeekNamedPipe
FreeLibrary
ReadFile
GetStdHandle
GetProcAddress
LoadLibraryA
GetFileType
WaitForMultipleObjects
GetTickCount
GetLocalTime
WideCharToMultiByte
InterlockedDecrement
CreateThread
CreateFileA
HeapAlloc
FindResourceExW
FindResourceW
LoadResource
CreateDirectoryW
WriteFile
SizeofResource
CreateFileW
LockResource
DeleteFileW
SetFileAttributesW
SetEvent
CreateEventA
ResetEvent
GetPrivateProfileStringA
WritePrivateProfileStringA
OutputDebugStringA
DeleteFileA
TerminateThread
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
SetFileTime
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
GetCurrentDirectoryA
lstrcpynA
lstrcatA
FindFirstFileA
FindClose
FindNextFileA
lstrlenA
MultiByteToWideChar
CopyFileA
GetFullPathNameA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
SetEndOfFile
LocalFree
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
SetFilePointer
IsProcessorFeaturePresent
wsprintfW
wsprintfA
SetTimer
PostQuitMessage
InvalidateRect
ShowWindow
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
ShellExecuteExA
ShellExecuteA
CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoCreateGuid
SysFreeString
VariantInit
VariantClear
SysAllocString
fseek
??3@YAXPAX@Z
_mktime64
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
sprintf_s
??_U@YAPAXI@Z
_vsnprintf_s
??_V@YAXPAX@Z
??2@YAPAXI@Z
wcstombs_s
memmove_s
vsprintf_s
rand
memcpy_s
_wrename
_vscprintf
_mbscmp
_mbschr
strtok
_snprintf
ftell
_atoi64
_mbsupr_s
rename
_strupr
_mbsstr
strnlen
_purecall
_stat64i32
srand
_mbspbrk
_mbsicmp
fgetpos
_findnext64i32
_findclose
_mbslwr
_findfirst64i32
ldiv
_mbslwr_s
_itoa_s
_stricmp
_ltoa_s
atol
atof
_gcvt_s
fopen_s
fprintf
feof
clearerr
_wassert
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
atoi
__sys_nerr
strerror
fwrite
fflush
_gmtime64
sprintf
fputc
memchr
tolower
getenv
strncpy
fread
_stat64
_fstat64
_lseeki64
strtoul
realloc
malloc
calloc
free
_beginthreadex
strstr
isxdigit
islower
isupper
isdigit
isalpha
isprint
isalnum
isspace
isgraph
fclose
strrchr
fopen
fgets
strtol
strchr
__iob_func
fputs
_strtoi64
qsort
memmove
sscanf
strncmp
_errno
_strdup
_read
_close
_open
_write
_strnicmp
_lseek
_ltoa
memset
__CxxFrameHandler3
_CxxThrowException
memcpy
_time64
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_BADOFF@std@@3_JB
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
PathIsDirectoryA
?_GameStart@@YAXPAUHWND__@@PBD@Z
?_GameStop@@YAXXZ
?_GetDescAndLoadstep@@YAXPADPAM@Z
?_MsgHandle@@YAXPAUHWND__@@@Z
?_ReGameStart@@YAXPBD@Z
GameStart
GameStop
GetDescAndLoadstep
MsgHandle
ReGameStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ