[Kimochi] Prisma Miyu 2[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

[Kimochi] Prisma Miyu 2.rar
Size

834.9MB
MD5

ef84fe46784f00f788fc43277387bd98
SHA1

8eb819cab54b50ac0b4d6da64a66c9586bd06032
SHA256

6f43a5e5ea8514397af51a31f3cf7018a1ea75a526d6ee6a3d8dce1ee32761a4
SHA512

768eaf665ea49225231c6269e6298617376b1bfc18aa3bfd869fb93529dcf78e87f48af1168320f9b0656944a0384d7506bebe682761d98de61b4caecb0ba645
SSDEEP

12582912:MccD8Qo4AQYL2Dwvg5HzriOHmJPi10gcB8oFTcF141z32DQ+FpoyjESbvGVhyt7U:iiz2DwuTefiwTA4QDNFKBgkYEUE1G2FL

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[Kimochi] Prisma Miyu 2/CG_PU_02.exe
unpack001/[Kimochi] Prisma Miyu 2/live.dll

Files

[Kimochi] Prisma Miyu 2.rar
.rar

Password: kimochi.info
[Kimochi] Prisma Miyu 2/CG_PU_02.exe
.exe windows:4 windows x86 arch:x86

Password: kimochi.info

a1a66d588dcf1394354ebf6ec400c223

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shell32

ShellExecuteExW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetSpecialFolderPathW

gdi32

CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW

advapi32

FreeSid
AllocateAndInitializeSid
CheckTokenMembership

user32

GetParent
ScreenToClient
CreateWindowExW
GetDesktopWindow
GetWindowTextLengthW
SetWindowPos
SetTimer
GetMessageW
CopyImage
KillTimer
CharUpperW
SendMessageW
ShowWindow
BringWindowToTop
wsprintfW
MessageBoxW
EndDialog
ReleaseDC
GetWindowDC
GetMenu
GetWindowLongW
GetClassNameA
wsprintfA
DispatchMessageW
SetWindowTextW
GetSysColor
DestroyWindow
MessageBoxA
GetKeyState
IsWindow
GetDlgItem
GetClientRect
GetSystemMetrics
SetWindowLongW
UnhookWindowsHookEx
SetFocus
SystemParametersInfoW
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
EnableMenuItem
GetSystemMenu
CreateWindowExA
wvsprintfW
GetWindowTextW
GetWindowRect

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
OleLoadPicture
SysAllocString

kernel32

SetFileTime
SetEndOfFile
GetFileInformationByHandle
VirtualFree
GetModuleHandleA
WaitForMultipleObjects
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
GetSystemDirectoryW
GetCurrentThreadId
SuspendThread
TerminateThread
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
SetEnvironmentVariableW
GetDriveTypeW
CreateFileW
LoadLibraryA
SetThreadLocale
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareFileTime
WideCharToMultiByte
GetTempPathW
GetCurrentDirectoryW
GetEnvironmentVariableW
lstrcmpiW
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
GetModuleHandleW
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetStdHandle
WriteFile
lstrlenA
CreateDirectoryW
GetFileAttributesW
SetCurrentDirectoryW
GetLocalTime
SystemTimeToFileTime
CreateThread
GetExitCodeThread
Sleep
SetFileAttributesW
GetDiskFreeSpaceExW
SetLastError
GetTickCount
lstrlenW
ExitProcess
lstrcatW
GetProcAddress
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetQueuedCompletionStatus
ResumeThread
SetInformationJobObject
CreateIoCompletionPort
AssignProcessToJobObject
CreateJobObjectW
GetLastError
CreateProcessW
GetStartupInfoW
GetCommandLineW
GetStartupInfoA

msvcrt

_purecall
??2@YAPAXI@Z
_wtol
memset
memmove
memcpy
_wcsnicmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
malloc
realloc
free
wcsstr
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
strncmp
wcsncmp
wcsncpy
strncpy
??3@YAXPAX@Z

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
[Kimochi] Prisma Miyu 2/game.dat
[Kimochi] Prisma Miyu 2/game.ext
[Kimochi] Prisma Miyu 2/image/台詞有り/p_001.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_002.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_003.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_004.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_005.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_006.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞有り/p_007.png
.png

Password: kimochi.info
[Kimochi] Prisma Miyu 2/image/台詞無し/p_000.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_001.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_002.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_003.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_004.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_005.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_006.png
.png
[Kimochi] Prisma Miyu 2/image/台詞無し/p_007.png
.png
[Kimochi] Prisma Miyu 2/install.dat
[Kimochi] Prisma Miyu 2/live.dll
.dll windows:4 windows x86 arch:x86

45865013b20255e6e236cf0dca4b4ba9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent

kernel32

CreateSemaphoreA
ReleaseSemaphore
GetThreadPriority
FreeEnvironmentStringsA
MulDiv
GetModuleHandleW
DeviceIoControl
GetCurrentProcessId
GetTickCount
GetLocalTime
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
SetFilePointer
ReadFile
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateEventA
GetModuleHandleA
WaitForSingleObject
SetEvent
CreateThread
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ResumeThread
SetThreadPriority
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
WaitForMultipleObjects
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
GetLastError
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetDiskFreeSpaceA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetSystemInfo
LocalAlloc
LocalFree
GetComputerNameA

user32

DefWindowProcA
RegisterClassA
CreateWindowExA
IsRectEmpty
DestroyWindow
ShowWindow
SetForegroundWindow
UpdateWindow
SetWindowPos
PostMessageA
GetWindowPlacement
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
PostThreadMessageA
RegisterWindowMessageA
DispatchMessageA

gdi32

CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
CreateDIBSection

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoFreeUnusedLibraries

Exports

Exports

liveFinal
liveGetErrorID
liveInit
liveOggGetAutoRepeat
liveOggGetBuffPos
liveOggGetBuffSize
liveOggGetLen
liveOggGetPan
liveOggGetPosition
liveOggGetRepeatPos
liveOggGetVol
liveOggGetWritePos
liveOggIsEnd
liveOggIsPaused
liveOggIsPlaying
liveOggPause
liveOggPlay
liveOggSetAutoRepeat
liveOggSetPan
liveOggSetPosition
liveOggSetRepeatPos
liveOggSetVol
liveOggStrGetFormat
liveOggStrGetLen
liveOggStrGetPos
liveOggStrGetSize
liveOggStrRead
liveOggStrSetPos
liveOggStrmanAdd
liveOggStrmanDel
liveOggmanAdd
liveOggmanDel
liveOggmanGetCount
liveOggmanProcessEvent
liveOggmanRestore
liveOggmanSetUseThread
liveOggmanUpdate
liveScreenGetVideoMode
liveScreenGetVideoModeCount
liveScreenSetVideoMode
liveVersion
liveVideoGetAutoRepeat
liveVideoGetDC
liveVideoGetDIBInfo
liveVideoGetLen
liveVideoGetPan
liveVideoGetPosition
liveVideoGetSourceHeight
liveVideoGetSourceWidth
liveVideoGetVisible
liveVideoGetVol
liveVideoIsEnd
liveVideoIsPaused
liveVideoIsPlaying
liveVideoNeedPaint
liveVideoPause
liveVideoPlay
liveVideoReleaseDC
liveVideoResume
liveVideoSetAutoRepeat
liveVideoSetPan
liveVideoSetPosition
liveVideoSetRect
liveVideoSetVisible
liveVideoSetVol
liveVideoSuspend
liveVidmanAdd
liveVidmanDel
liveVidmanFreeDIB
liveVidmanGetDIB
liveVidmanPause
liveVidmanProcessEvent
liveVidmanRestart
liveVidmanResume
liveVidmanSuspend
liveWmpGetAutoRepeat
liveWmpGetBuffPos
liveWmpGetBuffSize
liveWmpGetLen
liveWmpGetPan
liveWmpGetPosition
liveWmpGetVol
liveWmpGetWritePos
liveWmpIsEnd
liveWmpIsPaused
liveWmpIsPlaying
liveWmpPause
liveWmpPlay
liveWmpSetAutoRepeat
liveWmpSetPan
liveWmpSetPosition
liveWmpSetVol
liveWmpmanAdd
liveWmpmanDel
liveWmpmanProcessEvent
liveWmpmanRestore

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
[Kimochi] Prisma Miyu 2/save.dat
[Kimochi] Prisma Miyu 2/はじめにお読み下さい.txt
[Kimochi] Prisma Miyu 2/説明.pdf
.pdf
[Kimochi] Prisma Miyu 2/＠OZ website ぜひご覧下さい。.URL

Sharing

General

Malware Config

Signatures

Files

Password: kimochi.info

Password: kimochi.info

a1a66d588dcf1394354ebf6ec400c223

Headers

File Characteristics

Imports

comctl32

shell32

gdi32

advapi32

user32

ole32

oleaut32

kernel32

msvcrt

Sections

.text Size: 111KB - Virtual size: 111KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 19KB

.rsrc Size: 19KB - Virtual size: 18KB

Password: kimochi.info

Password: kimochi.info

Password: kimochi.info

Password: kimochi.info

Password: kimochi.info

Password: kimochi.info

Password: kimochi.info

45865013b20255e6e236cf0dca4b4ba9

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

ole32

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 76KB - Virtual size: 85KB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 111KB - Virtual size: 111KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 19KB

.rsrc
Size: 19KB - Virtual size: 18KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 76KB - Virtual size: 85KB

.reloc
Size: 16KB - Virtual size: 14KB