ac6abbdb5536da00572c6cbc354da0c5501e967aa29123eb0c4095df6d2befeb

Sharing

Copy URL Twitter E-mail

General

Target

ac6abbdb5536da00572c6cbc354da0c5501e967aa29123eb0c4095df6d2befeb
Size

1.8MB
MD5

62f8e5bb8590237cf28bdee8d037086e
SHA1

efae41894df94f38d91a5286284802d032a42589
SHA256

ac6abbdb5536da00572c6cbc354da0c5501e967aa29123eb0c4095df6d2befeb
SHA512

f5dd40135dbb1265d450dd69a4272d6f258ceeaa7cb4dba523277403f3467580e270e0f4197d3b6746543c2a41e9851a8f8be25d82234164b6b2f96c16f10f90
SSDEEP

49152:EEuMqxxnWtk4qwY8LYGHkiU8bb1QxlYpVQJKcqBG:EFMqx3NyYGHka1QkMtqBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/game_patch_001/dyo_hd_.exe

Files

ac6abbdb5536da00572c6cbc354da0c5501e967aa29123eb0c4095df6d2befeb
.zip
game_patch_001/360截图20231023214439892.jpg
.jpg
game_patch_001/dyo_hd_.exe
.exe windows:4 windows x86

9f218e2815f855b4fc14ec2282d0a6e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
RemoveDirectoryA
DeleteFileA
CopyFileA
CreateDirectoryA
GetFileAttributesA
GetModuleHandleA
GlobalMemoryStatus
FindNextFileA
GetWindowsDirectoryA
GetDiskFreeSpaceExA
GetVersionExA
GetTempFileNameA
SetThreadIdealProcessor
GetExitCodeProcess
MapViewOfFile
CreateFileMappingA
FormatMessageA
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemInfo
CreateEventA
InitializeCriticalSection
HeapAlloc
HeapReAlloc
HeapFree
GetFileType
CreateFileA
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
ReadFile
SetFilePointer
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId
GetCommandLineA
GetVersion
lstrlenA
HeapDestroy
HeapCreate
GlobalLock
VirtualAlloc
IsBadWritePtr
RtlUnwind
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsGetValue
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RaiseException
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalAlloc
ResetEvent
WideCharToMultiByte
GetSystemDirectoryA
FindFirstFileA
FindClose
GetEnvironmentVariableA
GlobalUnlock
OutputDebugStringA
GetStartupInfoA
GetFileSize
CreateFileW
InterlockedExchange
InterlockedCompareExchange
CreateProcessA
GetFullPathNameA
lstrcmpiA
IsProcessorFeaturePresent
GetProcessHeap
GetCurrentProcessId
SetUnhandledExceptionFilter
DeleteCriticalSection
GlobalFree
IsBadReadPtr
IsBadCodePtr
lstrcpyA
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetModuleFileNameA
UnmapViewOfFile
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
SetCurrentDirectoryA
CreateMutexA
CloseHandle
Sleep
ReleaseMutex
VirtualFree
GetLastError

user32

GetClassNameA
SendMessageTimeoutA
IsWindowVisible
SetWindowPlacement
EnableWindow
SetFocus
GetDlgItem
SetWindowTextA
EndDialog
DialogBoxParamA
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetClientRect
UpdateWindow
MoveWindow
PostQuitMessage
SetWindowRgn
GetWindowPlacement
SetWindowPos
ChangeDisplaySettingsExA
EnumDisplaySettingsA
RegisterClassExA
SetWindowLongA
GetSystemMenu
GetWindowLongA
SetRect
AdjustWindowRectEx
OpenIcon
CreateIconIndirect
DestroyIcon
LoadCursorA
SetClassLongA
ClientToScreen
DrawMenuBar
InsertMenuItemA
CreateMenu
EnumWindows
ChangeDisplaySettingsA
SystemParametersInfoA
GetSystemMetrics
SetCursorPos
SetMenu
ShowCursor
DestroyMenu
DestroyWindow
LoadIconA
GetWindowRect
CreateWindowExA
RegisterClassA
FindWindowA
SetForegroundWindow
SetCursor
GetWindowTextA
DeleteMenu
DefWindowProcA
SendMessageA
InvalidateRect
MessageBoxA
TrackPopupMenu
GetSubMenu
ShowWindow
PostMessageA
ScreenToClient
GetCursorPos
SetKeyboardState
GetKeyboardState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
ReleaseDC
GetDC
IsIconic

gdi32

GetDeviceCaps
SetStretchBltMode
GetObjectA
GetDIBits
ExtCreateRegion
CreateBitmap
CreateDIBSection
SetTextColor
SetBkMode
CreateFontIndirectA
SelectObject
CreateCompatibleDC
EnumFontFamiliesExA
CreateFontA
DeleteObject
DeleteDC
GetStockObject
StretchDIBits
TextOutA

shell32

DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
DragAcceptFiles
Shell_NotifyIconA
ShellExecuteExA
SHGetSpecialFolderPathA
FindExecutableA

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA

comdlg32

GetSaveFileNameA

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
GetRunningObjectTable

winmm

waveInGetDevCapsA
waveInGetNumDevs
waveOutGetDevCapsA
mciSendStringA
timeGetTime
timeGetDevCaps
timeEndPeriod
mmioStringToFOURCCA
mmioOpenA
waveOutGetNumDevs
mmioAscend
timeBeginPeriod
joyGetNumDevs
joyGetPosEx
mmioClose
mciSendCommandA
mmioDescend
mmioRead

msacm32

acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest

imm32

ImmAssociateContext

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

d3d9

Direct3DCreate9

dsound

ord1

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f218e2815f855b4fc14ec2282d0a6e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comdlg32

comctl32

ole32

winmm

msacm32

imm32

version

d3d9

dsound

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 119KB - Virtual size: 2.9MB

_RDATA Size: 26KB - Virtual size: 25KB

.data1 Size: 512B - Virtual size: 200B

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 119KB - Virtual size: 2.9MB

_RDATA
Size: 26KB - Virtual size: 25KB

.data1
Size: 512B - Virtual size: 200B

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB