AddExp
BoxExp
Command
DllInit
Gate
NPCFunc
RecvPacket
SendPacket
Overview
overview
7Static
static
7Server Par...re.dll
windows7-x64
1Server Par...re.dll
windows10-2004-x64
3Server Par...54.exe
windows7-x64
1Server Par...54.exe
windows10-2004-x64
1Server Par...ix.dll
windows7-x64
3Server Par...ix.dll
windows10-2004-x64
3Server Par...54.dll
windows7-x64
3Server Par...54.dll
windows10-2004-x64
3Server Par...re.dll
windows7-x64
1Server Par...re.dll
windows10-2004-x64
3Server Par...ix.dll
windows7-x64
1Server Par...ix.dll
windows10-2004-x64
3Server Par...54.dll
windows7-x64
3Server Par...54.dll
windows10-2004-x64
3Server Par...OK.exe
windows7-x64
1Server Par...OK.exe
windows10-2004-x64
1Server Par...ok.dll
windows7-x64
3Server Par...ok.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Server Para a CheatsBrazil/DBSRV/Run/Core.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Server Para a CheatsBrazil/DBSRV/Run/Core.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Server Para a CheatsBrazil/DBSRV/Run/DBsrv_6500Slots_+_criacao_de_char_+_754.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Server Para a CheatsBrazil/DBSRV/Run/DBsrv_6500Slots_+_criacao_de_char_+_754.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_BugFix.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_BugFix.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_PacketProtocolV754.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_PacketProtocolV754.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Server Para a CheatsBrazil/TMSRV/Run/Core.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Server Para a CheatsBrazil/TMSRV/Run/Core.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_BugFix.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_BugFix.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_PacketProtocolV754.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_PacketProtocolV754.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
Server Para a CheatsBrazil/TMSRV/Run/TMSrv_6500Slots_+_gsHook_+_patch754_+_DropiInv_+_TradeOK.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Server Para a CheatsBrazil/TMSRV/Run/TMSrv_6500Slots_+_gsHook_+_patch754_+_DropiInv_+_TradeOK.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Server Para a CheatsBrazil/TMSRV/Run/gsHook.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
Server Para a CheatsBrazil/TMSRV/Run/gsHook.dll
Resource
win10v2004-20231215-en
Target
487fe1374981ddce867d3736e6b4af84
Size
518KB
MD5
487fe1374981ddce867d3736e6b4af84
SHA1
219acc93fca9fbdce9de34042e8432216e21ec94
SHA256
03f4afcba8c7b05f832165844a0f5da90af2c091fc4a885d2e4fc8e13d930a5f
SHA512
ed5081282d697acf650afb1c9e6407e354424d95f10d8408b329ae281eb2e7b400bb55197375bce2ea680e80600b6004fe09ff203a9004d151ff5108f5d779a6
SSDEEP
12288:uHrmMDPLIVn+6HrmXoEVCotgNg1virOLFOifNlVZi08VJml8Ut7eR:0iM7LAiYSRWNg14OLJ/Vo2l3Z6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Server Para a CheatsBrazil/DBSRV/Run/Core.dll | acprotect |
static1/unpack001/Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_BugFix.dll | acprotect |
static1/unpack001/Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_PacketProtocolV754.dll | acprotect |
static1/unpack001/Server Para a CheatsBrazil/TMSRV/Run/Core.dll | acprotect |
static1/unpack001/Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_BugFix.dll | acprotect |
static1/unpack001/Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_PacketProtocolV754.dll | acprotect |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Server Para a CheatsBrazil/DBSRV/Run/Core.dll |
unpack001/Server Para a CheatsBrazil/DBSRV/Run/DBsrv_6500Slots_+_criacao_de_char_+_754.exe |
unpack001/Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_BugFix.dll |
unpack001/Server Para a CheatsBrazil/DBSRV/Run/Plugin/DBSrv_PacketProtocolV754.dll |
unpack001/Server Para a CheatsBrazil/TMSRV/Run/Core.dll |
unpack001/Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_BugFix.dll |
unpack001/Server Para a CheatsBrazil/TMSRV/Run/Plugin/TMSrv_PacketProtocolV754.dll |
unpack001/Server Para a CheatsBrazil/TMSRV/Run/TMSrv_6500Slots_+_gsHook_+_patch754_+_DropiInv_+_TradeOK.exe |
unpack001/Server Para a CheatsBrazil/TMSRV/Run/gsHook.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeleteFileA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetLastError
MoveFileA
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetModuleFileNameA
LCMapStringA
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetConsoleCtrlHandler
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
HeapCreate
HeapDestroy
LCMapStringW
SetCurrentDirectoryA
GetVersionExA
GetEnvironmentVariableA
VirtualAlloc
VirtualFree
HeapFree
HeapReAlloc
HeapAlloc
SetStdHandle
GetFileType
SetHandleCount
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
ReadFile
CloseHandle
InterlockedIncrement
LoadLibraryA
GetProcAddress
OutputDebugStringA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
SetFilePointer
IsBadWritePtr
IsBadReadPtr
HeapValidate
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
SetEnvironmentVariableA
MessageBoxA
CharNextA
RegisterClassA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
CreateMenu
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
PostQuitMessage
DefWindowProcA
EndPaint
BeginPaint
SetWindowTextA
GetStockObject
WSAAsyncSelect
listen
bind
htons
gethostname
socket
send
WSAStartup
ioctlsocket
recv
WSAGetLastError
inet_addr
accept
gethostbyname
WSACleanup
connect
closesocket
timeGetTime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetConsoleCtrlHandler
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
WideCharToMultiByte
SetEndOfFile
SetStdHandle
SetHandleCount
HeapCreate
RaiseException
CompareStringA
CompareStringW
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
SetCurrentDirectoryA
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
VirtualAlloc
VirtualFree
HeapFree
HeapReAlloc
HeapAlloc
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
LoadLibraryA
GetProcAddress
OutputDebugStringA
InterlockedDecrement
GetStdHandle
DebugBreak
GetVersion
GetCommandLineA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
ReadFile
CloseHandle
WriteFile
GetFileType
CreateFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
SetEnvironmentVariableA
MessageBoxA
CharNextA
ReleaseDC
GetDC
SetTimer
RegisterClassA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
CreateMenu
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
EndPaint
BeginPaint
PostQuitMessage
SetWindowTextA
GetStockObject
GetObjectA
CreateFontA
SelectObject
SetTextColor
TextOutA
DeleteObject
WSAAsyncSelect
listen
bind
htons
gethostname
socket
send
connect
WSAStartup
recv
WSAGetLastError
inet_addr
accept
htonl
WSACleanup
ntohl
ioctlsocket
closesocket
timeGetTime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AddAtomA
CreateThread
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
SetConsoleTextAttribute
Sleep
VirtualProtect
VirtualQuery
__dllonexit
_assert
_errno
_filbuf
_iob
abort
difftime
fclose
fflush
fgetc
fopen
free
fscanf
malloc
memcpy
printf
putchar
puts
rand
sprintf
srand
sscanf
time
AddExp
BoxExp
Command
DllInit
Gate
NPCFunc
RecvPacket
SendPacket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_DISCARDABLE