ShameGamesGit[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

ShameGamesGit.zip
Size

1.2MB
MD5

6d8878351a6bdbb1d30824ed63e6f0f4
SHA1

d82ce68b56ed8b9e520d3dc82a6689b35d8023ff
SHA256

feb77740eb6d9683514987b51d8d4148f3521d2971525aff05516bc181db917f
SHA512

e8a863737b27d322ae9d56c0e563e137e5275c37ecbffd6a0967a8ef0219412aedf650829316537c554e8c04d2478a6d9404a9c96245285a543e5384c000f704
SSDEEP

24576:W2YjOlqrysyZlvMw8KuvPje/x8uSjDljSQV5GcnwgPkSdz6MuS68Gtb:W2+y5Z9cFK/x8jjDVXVQbmuSm

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Git.exe
unpack001/Glk.dll
unpack001/GlkEspaol.dll
unpack001/GlkItaliano.dll
unpack001/ScaleGfx.dll

Files

ShameGamesGit.zip
.zip
Git.chm
.chm
Git.exe
.exe windows:6 windows x86

46c801c72e4c5171f5fbde3a2e6e5dbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

glk

ord1
ord100
ord105
ord87
ord69
ord71
ord78
ord70
ord77
ord79
ord51
ord52
ord2
ord50
ord48
ord44
ord40
ord41
ord125
ord122
ord42
ord31
ord29
ord26
ord30
ord28
ord67
ord111
ord114
ord116
ord113
ord118
ord117
ord136
ord88

kernel32

CloseHandle
CompareStringW
CreateFileA
CreateFileMappingA
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

MessageBoxA

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 346B

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Glk.dll
.dll windows:6 windows x86

7deac4d5d9924352741a7b61ad204b0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeEndPeriod
timeBeginPeriod

dsound

ord1

kernel32

GetCPInfo
SetErrorMode
GetFileAttributesExA
GetFileSizeEx
GetFileTime
FindResourceExW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateFileW
GetCurrentThread
SystemTimeToTzSpecificLocalTime
FindNextFileA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
WriteConsoleW
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GetOEMCP
lstrcmpA
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
SetStdHandle
GetFileType
GetFullPathNameW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
CompareStringW
LCMapStringW
GetStringTypeW
GetDriveTypeW
GetTimeZoneInformation
FindFirstFileExW
ResumeThread
SuspendThread
SetThreadPriority
GetModuleFileNameA
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
FormatMessageA
LocalFree
LoadLibraryW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetModuleHandleW
GetModuleFileNameW
SetLastError
VirtualProtect
GetACP
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
FileTimeToLocalFileTime
GetTempFileNameA
CreateFileA
GetLocaleInfoA
GetConsoleWindow
SetConsoleTitleA
SetConsoleCtrlHandler
ReadConsoleA
FreeConsole
AllocConsole
GetUserDefaultLangID
ResetEvent
GetTempPathA
WriteFile
GetFileAttributesA
GetStdHandle
WideCharToMultiByte
OutputDebugStringA
MultiByteToWideChar
FindResourceW
SizeofResource
GetModuleHandleA
GetCurrentThreadId
GetTickCount
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
CloseHandle
MulDiv
LoadLibraryA
GetProcAddress
FindResourceA
lstrlenA
LockResource
LoadResource
GetVersionExA
ExitProcess
GlobalFree
GlobalHandle
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
lstrcpynA
GetCurrentDirectoryW
GetUserDefaultUILanguage

user32

ShowOwnedPopups
CharUpperA
MapDialogRect
GetAsyncKeyState
IsRectEmpty
UnionRect
SetRect
WindowFromPoint
ReuseDDElParam
UnpackDDElParam
IntersectRect
InsertMenuItemA
CreatePopupMenu
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
GetMenuItemInfoA
DestroyMenu
GetCursorPos
TranslateMessage
GetMessageA
GetWindowThreadProcessId
GetNextDlgTabItem
EndDialog
IsDialogMessageA
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetLastActivePopup
GetTopWindow
GetClassLongA
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
IsZoomed
GetScrollPos
RedrawWindow
ValidateRect
GetForegroundWindow
TrackPopupMenu
GetMenu
GetCapture
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
DispatchMessageA
RegisterWindowMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
GetMenuStringA
SetRectEmpty
SendDlgItemMessageA
UnregisterClassA
ScrollDC
FillRect
GetWindowLongA
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetWindowLongA
SetWindowRgn
AppendMenuA
GetSysColorBrush
RealChildWindowFromPoint
InsertMenuA
EnableMenuItem
CreateMenu
SetPropA
GetSystemMenu
LoadMenuA
KillTimer
SetTimer
GetClipboardData
CloseClipboard
OpenClipboard
GetDlgCtrlID
SetWindowPos
PostQuitMessage
GetKeyboardLayout
LoadStringA
LoadIconW
LoadCursorA
SetCursor
MessageBoxA
SetForegroundWindow
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
MsgWaitForMultipleObjects
IsWindowVisible
WaitMessage
PeekMessageA
LoadIconA
GetWindow
GetClassNameA
EqualRect
GetWindowRect
GetWindowTextA
SetWindowTextA
LoadBitmapW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
PtInRect
ScreenToClient
GetClientRect
UpdateWindow
SetMenuItemInfoA
SetMenuInfo
GetMenuInfo
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
LoadMenuW
GetKeyState
IsChild
ReleaseDC
GetDC
GetSystemMetrics
SystemParametersInfoA
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetFocus
GetActiveWindow
SetFocus
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetParent
OffsetRect
InflateRect
CopyRect
DrawFocusRect
GetSysColor
InvalidateRect
EnableWindow
PostMessageA
SendMessageA
DrawFrameControl
wsprintfA
GetWindowTextLengthA

gdi32

SetTextColor
SetBkColor
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontA
GetCharWidthA
DPtoLP
SetMapMode
SaveDC
RestoreDC
IntersectClipRect
GetStockObject
GetPixel
SetBkMode
GetClipBox
SetViewportExtEx
GdiFlush
CreatePatternBrush
CreateBitmap
DeleteDC
GetBkColor
CreateCompatibleBitmap
TextOutA
GetTextExtentPoint32A
TranslateCharsetInfo
ExtCreateRegion
ExtTextOutA
RectVisible
PtVisible
GetOutlineTextMetricsA
Escape
AddFontResourceA
TextOutW
MoveToEx
SetTextAlign
GetGlyphIndicesW
GetTextExtentPoint32W
GetTextAlign
GetCurrentPositionEx
GetCurrentObject
EnumFontFamiliesExA
CreatePen
CreateSolidBrush
Rectangle
GetObjectA
DeleteObject
SelectObject
StretchDIBits
CreateDIBSection
CreateFontIndirectA
CreateFontIndirectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
GetTextMetricsA
ExcludeClipRect

comdlg32

GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
IsTextUnicode
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA

comctl32

ImageList_Add
ImageList_Create

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA

uxtheme

IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
CloseThemeData
GetThemePartSize
GetThemeMargins
DrawThemeText
DrawThemeBackground
IsAppThemed
OpenThemeData
GetThemeBackgroundContentRect

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
CoCreateGuid
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
VarBstrCmp
SysAllocStringLen
VariantInit
VariantChangeType

oleacc

CreateStdAccessibleObject
LresultFromObject

Exports

Exports

InitGlk
garglk_set_reversevideo
garglk_set_reversevideo_stream
garglk_set_zcolors
garglk_set_zcolors_stream
giblorb_count_resources
giblorb_create_map
giblorb_destroy_map
giblorb_get_resource_map
giblorb_load_chunk_by_number
giblorb_load_chunk_by_type
giblorb_load_resource
giblorb_set_resource_map
gidebug_announce_cycle
gidebug_debugging_available
gidebug_output
gidebug_pause
gidispatch_call
gidispatch_count_classes
gidispatch_count_functions
gidispatch_count_intconst
gidispatch_get_function
gidispatch_get_function_by_id
gidispatch_get_intconst
gidispatch_get_objrock
gidispatch_prototype
gidispatch_set_object_registry
gidispatch_set_retained_registry
glk_buffer_canon_decompose_uni
glk_buffer_canon_normalize_uni
glk_buffer_to_lower_case_uni
glk_buffer_to_title_case_uni
glk_buffer_to_upper_case_uni
glk_cancel_char_event
glk_cancel_hyperlink_event
glk_cancel_line_event
glk_cancel_mouse_event
glk_char_to_lower
glk_char_to_upper
glk_current_simple_time
glk_current_time
glk_date_to_simple_time_local
glk_date_to_simple_time_utc
glk_date_to_time_local
glk_date_to_time_utc
glk_exit
glk_fileref_create_by_name
glk_fileref_create_by_prompt
glk_fileref_create_from_fileref
glk_fileref_create_temp
glk_fileref_delete_file
glk_fileref_destroy
glk_fileref_does_file_exist
glk_fileref_get_rock
glk_fileref_iterate
glk_gestalt
glk_gestalt_ext
glk_get_buffer_stream
glk_get_buffer_stream_uni
glk_get_char_stream
glk_get_char_stream_uni
glk_get_line_stream
glk_get_line_stream_uni
glk_image_draw
glk_image_draw_scaled
glk_image_get_info
glk_put_buffer
glk_put_buffer_stream
glk_put_buffer_stream_uni
glk_put_buffer_uni
glk_put_char
glk_put_char_stream
glk_put_char_stream_uni
glk_put_char_uni
glk_put_string
glk_put_string_stream
glk_put_string_stream_uni
glk_put_string_uni
glk_request_char_event
glk_request_char_event_uni
glk_request_hyperlink_event
glk_request_line_event
glk_request_line_event_uni
glk_request_mouse_event
glk_request_timer_events
glk_schannel_create
glk_schannel_create_ext
glk_schannel_destroy
glk_schannel_get_rock
glk_schannel_iterate
glk_schannel_pause
glk_schannel_play
glk_schannel_play_ext
glk_schannel_play_multi
glk_schannel_set_volume
glk_schannel_set_volume_ext
glk_schannel_stop
glk_schannel_unpause
glk_select
glk_select_poll
glk_set_echo_line_event
glk_set_hyperlink
glk_set_hyperlink_stream
glk_set_interrupt_handler
glk_set_style
glk_set_style_stream
glk_set_terminators_line_event
glk_set_window
glk_simple_time_to_date_local
glk_simple_time_to_date_utc
glk_sound_load_hint
glk_stream_close
glk_stream_get_current
glk_stream_get_position
glk_stream_get_rock
glk_stream_iterate
glk_stream_open_file
glk_stream_open_file_uni
glk_stream_open_memory
glk_stream_open_memory_uni
glk_stream_open_resource
glk_stream_open_resource_uni
glk_stream_set_current
glk_stream_set_position
glk_style_distinguish
glk_style_measure
glk_stylehint_clear
glk_stylehint_set
glk_tick
glk_time_to_date_local
glk_time_to_date_utc
glk_window_clear
glk_window_close
glk_window_erase_rect
glk_window_fill_rect
glk_window_flow_break
glk_window_get_arrangement
glk_window_get_echo_stream
glk_window_get_parent
glk_window_get_rock
glk_window_get_root
glk_window_get_sibling
glk_window_get_size
glk_window_get_stream
glk_window_get_type
glk_window_iterate
glk_window_move_cursor
glk_window_open
glk_window_set_arrangement
glk_window_set_background_color
glk_window_set_echo_stream
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_sig_cmp
png_start_read_image
png_warning
sglk_set_basename
winglk_app_set_name
winglk_fileref_create_by_name
winglk_get_initial_filename
winglk_get_resource_handle
winglk_load_config_file
winglk_set_about_text
winglk_set_gui
winglk_set_help_file
winglk_set_menu_name
winglk_set_resource_directory
winglk_show_game_dialog
winglk_stream_open_resource
winglk_window_set_title

Sections

.text
Size: 904KB - Virtual size: 903KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.modplug
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GlkEspaol.dll
.dll windows:6 windows x86

4a557a2f186bbbd27f1cb01bb5e9d426

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetACP
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer

Exports

Exports

IsEnabled

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GlkItaliano.dll
.dll windows:6 windows x86

4a557a2f186bbbd27f1cb01bb5e9d426

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetACP
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer

Exports

Exports

IsEnabled

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.txt
ScaleGfx.dll
.dll windows:4 windows x86

e1ec3f5bc27df3310b2ec77dac8e604e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

__dllonexit
_assert
_errno
abort
ceil
fflush
floor
free
malloc
memset
strcmp

gdi32

GdiFlush

kernel32

AddAtomA
CreateSemaphoreA
FindAtomA
FreeLibrary
GetAtomNameA
GetLastError
GetProcAddress
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

Exports

Exports

ScaleGfx

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46c801c72e4c5171f5fbde3a2e6e5dbf

Headers

DLL Characteristics

File Characteristics

Imports

glk

kernel32

user32

Sections

.text Size: 335KB - Virtual size: 334KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 5KB - Virtual size: 12KB

.00cfg Size: 512B - Virtual size: 8B

.voltbl Size: 512B - Virtual size: 346B

.rsrc Size: 210KB - Virtual size: 210KB

.reloc Size: 15KB - Virtual size: 15KB

7deac4d5d9924352741a7b61ad204b0f

Headers

DLL Characteristics

File Characteristics

Imports

winmm

dsound

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 904KB - Virtual size: 903KB

.modplug Size: - Virtual size: 20KB

.rdata Size: 268KB - Virtual size: 267KB

.data Size: 97KB - Virtual size: 590KB

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 50KB - Virtual size: 50KB

4a557a2f186bbbd27f1cb01bb5e9d426

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 3KB - Virtual size: 3KB

4a557a2f186bbbd27f1cb01bb5e9d426

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 3KB - Virtual size: 3KB

e1ec3f5bc27df3310b2ec77dac8e604e

Headers

.text
Size: 335KB - Virtual size: 334KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 5KB - Virtual size: 12KB

.00cfg
Size: 512B - Virtual size: 8B

.voltbl
Size: 512B - Virtual size: 346B

.rsrc
Size: 210KB - Virtual size: 210KB

.reloc
Size: 15KB - Virtual size: 15KB

.text
Size: 904KB - Virtual size: 903KB

.modplug
Size: - Virtual size: 20KB

.rdata
Size: 268KB - Virtual size: 267KB

.data
Size: 97KB - Virtual size: 590KB

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 50KB - Virtual size: 50KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 52B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 16KB

.edata
Size: 512B - Virtual size: 72B

.idata
Size: 1024B - Virtual size: 936B

.reloc
Size: 1024B - Virtual size: 840B