78581a84f762322217da7332ce4acc53

Sharing

Copy URL

Twitter E-mail

General

Target

78581a84f762322217da7332ce4acc53
Size

1.3MB
MD5

78581a84f762322217da7332ce4acc53
SHA1

c6c93974da4f15423470e78f2c230b1fa2a15a00
SHA256

bf2ea1d20b4e1f2eb6f5fc3cfec853004e9c1886aaed9b3af719a8ec6c967e49
SHA512

7cab782af528e2e99333c54535e91f91e09a777203bc7192d3411f52dc7e0accd3d3b9fe1fa4990fbf189576df60e8702d680b95c35afa71e9cb84e7dd03009e
SSDEEP

24576:b0M7iuEt8sooFcYRLSUBr+6qyw2IpdsDL5HyAvNSoS3PSoklSoP1SoOrSoaBVSoU:oM+cYRej72MsDsAv1SDkNPdOPaB9pZZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78581a84f762322217da7332ce4acc53

Files

78581a84f762322217da7332ce4acc53
.exe windows:5 windows x86 arch:x86

08cc39c9347264af686413ebd5c87a78

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\duduwork\KunLunClient\KunlunGame\Release\KunlunGame.pdb

Imports

wininet

CommitUrlCacheEntryW
GetUrlCacheEntryInfoW
InternetCombineUrlW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestExW
HttpEndRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW
CreateUrlCacheEntryW

kernel32

InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
CreateDirectoryW
CreateThread
lstrcmpiW
FreeLibrary
LoadLibraryExW
GetProcAddress
LoadLibraryW
GetCurrentProcessId
lstrcpynA
GetTickCount
GlobalFree
CreateProcessW
SetEndOfFile
RemoveDirectoryW
GetWindowsDirectoryW
FlushFileBuffers
GetModuleHandleA
VirtualProtect
LoadLibraryA
VirtualQuery
SetFilePointer
HeapFree
InterlockedIncrement
HeapSize
GetProcessHeap
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
RtlUnwind
ExitThread
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemInfo
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
MulDiv
lstrcmpW
GetLastError
DeleteCriticalSection
SetLastError
GetCurrentProcess
FlushInstructionCache
lstrcatW
lstrcpynW
lstrlenW
GetVersionExW
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
HeapCreate
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetLocaleInfoA
GetStringTypeA
GetModuleFileNameW
lstrcpyW
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetCurrentThreadId
Sleep
GetModuleHandleW
WaitForSingleObject
GetFileSize
CopyFileW
OutputDebugStringW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
CreateFileW
ReadFile
WriteFile
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
HeapDestroy
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
HeapReAlloc
HeapAlloc

user32

GetKeyNameTextW
MapVirtualKeyW
IntersectRect
GetCursorPos
LoadStringW
LoadMenuW
LoadAcceleratorsW
LoadImageW
DestroyIcon
SetWindowRgn
SetWindowsHookExW
UnhookWindowsHookEx
GetSystemMetrics
PtInRect
DrawEdge
DrawFocusRect
SystemParametersInfoW
IsWindowEnabled
KillTimer
SetTimer
CallNextHookEx
GetDlgCtrlID
GetActiveWindow
DialogBoxParamW
MessageBeep
SetCursor
MessageBoxW
SetDlgItemTextW
SetRect
IsRectEmpty
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDesktopWindow
FillRect
GetClassNameW
GetForegroundWindow
InvalidateRgn
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
MoveWindow
CharNextW
GetSysColor
InflateRect
CallWindowProcW
wsprintfW
AttachThreadInput
GetSysColorBrush
PeekMessageW
IsChild
SetParent
GetKeyState
ReleaseCapture
GetFocus
SetFocus
EndPaint
BeginPaint
SetRectEmpty
SetMenuDefaultItem
CheckMenuRadioItem
EnableMenuItem
AppendMenuW
DeleteMenu
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
DestroyMenu
TrackPopupMenu
SetActiveWindow
SetForegroundWindow
GetWindowPlacement
IsIconic
SetMenu
TranslateAcceleratorW
UnionRect
IsZoomed
UnregisterClassA
RemoveMenu
CreatePopupMenu
GetSubMenu
IsMenu
CharLowerW
GetWindowDC
GetMessagePos
WindowFromPoint
FrameRect
ModifyMenuW
TrackPopupMenuEx
MonitorFromPoint
DrawFrameControl
SetMenuItemInfoW
GetClassInfoExW
IsWindow
AdjustWindowRectEx
EnableWindow
RedrawWindow
ShowWindow
InvalidateRect
UpdateWindow
GetMenu
DestroyWindow
wvsprintfW
GetWindowThreadProcessId
IsWindowVisible
SetCapture
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadCursorW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
DrawTextW
OffsetRect
SetWindowLongW
GetWindow
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
GetDlgItem
GetParent
GetClientRect
GetWindowRect
SetWindowPos
SendMessageW
GetWindowLongW
EndDialog
GetCapture
LoadStringA

gdi32

SetBrushOrgEx
SetBkColor
PatBlt
CreateBitmap
CreatePatternBrush
CreateDIBSection
SelectClipRgn
CreateRectRgnIndirect
IntersectClipRect
GetMapMode
ExtCreateRegion
GetDIBits
CreateICW
CombineRgn
OffsetRgn
SetDIBColorTable
LPtoDP
DPtoLP
RestoreDC
SaveDC
CreateSolidBrush
GetDeviceCaps
StretchBlt
CreateCompatibleBitmap
GetDIBColorTable
GetClipBox
SetWindowOrgEx
GetStockObject
SetBkMode
SetTextColor
BitBlt
CreateFontIndirectW
GetObjectW
DeleteObject
SelectObject
SetMapMode
CreateCompatibleDC
DeleteDC

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
StringFromGUID2
CoMarshalInterThreadInterfaceInStream
OleUninitialize
OleInitialize
CoGetInterfaceAndReleaseStream
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc

oleaut32

VarUI4FromStr
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
VariantCopyInd
VariantChangeType
DispCallFunc
CreateDispTypeInfo
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
VariantClear
VariantInit
SysAllocString
SysFreeString

comctl32

ImageList_GetIconSize
ImageList_Create
ImageList_Add
ImageList_LoadImageW
ImageList_Destroy
ImageList_Draw
_TrackMouseEvent
ImageList_GetImageCount
InitCommonControlsEx
ImageList_DrawIndirect

msimg32

TransparentBlt
AlphaBlend

urlmon

CoInternetGetSession
ReleaseBindInfo

gdiplus

GdipAlloc
GdipDeleteGraphics
GdiplusShutdown
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipCreateBitmapFromStream
GdipFree

Sections

.text
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 3080.2MB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08cc39c9347264af686413ebd5c87a78

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

urlmon

gdiplus

Sections

.text Size: 403KB - Virtual size: 403KB

.rdata Size: 89KB - Virtual size: 88KB

.data Size: 18KB - Virtual size: 26KB

.rsrc Size: 326KB - Virtual size: 326KB

.reloc Size: 38KB - Virtual size: 38KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 45KB - Virtual size: 44KB

.uuu9 Size: 3080.2MB - Virtual size: 44KB

.text
Size: 403KB - Virtual size: 403KB

.rdata
Size: 89KB - Virtual size: 88KB

.data
Size: 18KB - Virtual size: 26KB

.rsrc
Size: 326KB - Virtual size: 326KB

.reloc
Size: 38KB - Virtual size: 38KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 45KB - Virtual size: 44KB

.uuu9
Size: 3080.2MB - Virtual size: 44KB