d:\ProjectGSDII\PC\data\area\area_b\vb08\Release\vb08.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9b4855f15ab7ac6da5e04c32e52a5379.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b4855f15ab7ac6da5e04c32e52a5379.dll
Resource
win10v2004-20231222-en
General
-
Target
9b4855f15ab7ac6da5e04c32e52a5379
-
Size
592KB
-
MD5
9b4855f15ab7ac6da5e04c32e52a5379
-
SHA1
f3d187b12cd5b02aae5dbac25517ae4eeb58a32c
-
SHA256
7c65f82528a79e9536977d3a2632a36d99656b6d2fabfa70978e48e5215f9096
-
SHA512
6ea5b402d9fc69570aacb97da395444563b40fd5873d91f0e3e5c5ab373672f9ed20789fa4459a57b4d17141a6b76072660cd83a8e3f8586d2dfcb6dc55ad828
-
SSDEEP
12288:KMPDu/nOfzXuhEvyVojmYxSDgRi9Rql1BxbUkwnkjiepakMBW6feRAKTt7eSZLWk:javkxSDgRi9Rql1BxbUkwnkjiepakMBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b4855f15ab7ac6da5e04c32e52a5379
Files
-
9b4855f15ab7ac6da5e04c32e52a5379.dll windows:4 windows x86 arch:x86
5328c2af53efebb914ca2b0d49129c2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
psxlib
SetPolyFT3
ratan2
GsSortPoly
GsSetLsMatrix
rcos
rsin
GsSortFastBg
getScratchAddr
PSX_Printf
OuterProduct0
SquareRoot0
VectorNormalS
GetTPage
GetClut
SetSpadStack
ResetSpadStack
gte_stsxy3
gte_ldrgb
gte_ldv3
gte_rtpt
gte_stflg
gte_nclip
gte_stopz
gte_ldv0
gte_rtps
gte_stsxy3_gt3
gte_avsz3
gte_stotz
gte_ncct
addPrim
gte_strgb3_gt3
gte_stsxy3_gt4
gte_stsxy
gte_avsz4
gte_strgb3_gt4
gte_nccs
gte_strgb
PSX_Free
PSX_Alloc
gsdmain
SvectorToXYZ
get_rand
FilterWhiteOut
FilterWhiteIn
SetFieldGamen
CalcHeight
CreateFreeAnimeType
AnimeDispFast
gm_set_data
CharaFlgCheck
CharaFlgSetOff
SetAction
AnimeChange
ReactionDataSetChara
CreateAfterWork
SetRGBAfterWork
DispAfterWork
DeleteAfterWork
DelteMaskType
SetMaskTypeRGB
CreateMaskType
SetMaskTypeShape
DispMaskType
CalcAtari3D
ActionKanouDispCheck
ChangeFlgCheck
SetActionIndex
GrnSetAmbient
SkySetAmbient
VramPX
VramPY
GetGsOutPacket
SetGsOutPacket
GetFixedAdrs
BSK_PartyItemSort
WindowDisp
WindowBoxDisp
G2_item_num
G2_item_move
G2_min_item_move
WindowBoxCreate
WindowCreate
WindowAddStr
G2_item_text
WindowClear
WindowBoxMove
WindowSetNumber
WindowCursorSetXY
FC_ItemName
BSK_GetPartyItemInfo
BSK_GetPartyItemNo
WindowClose
WindowOpenCenter
WindowIndexSetRGB
G2_del_chk
IndexWindowSetRGB
IndexWindowAddStr
IndexWindowSetDispW
IndexWindowClear
SD_call
WindowBoxDelete
WindowDelete
G2_item_cnt
kernel32
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetEnvironmentStringsW
ExitProcess
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
Exports
Exports
GetData
vb08_GetData
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ