e78882fa18cadb5afe2b4d8ca10e2cacf31f2b976a8778c2453b6ca7c8bfb72e

Sharing

Copy URL Twitter E-mail

General

Target

e78882fa18cadb5afe2b4d8ca10e2cacf31f2b976a8778c2453b6ca7c8bfb72e
Size

3.4MB
MD5

843d61b1d70519495ab21cff9957adf7
SHA1

eed1da02b6c2abb7c59e8c88ef5a3dc42272bab4
SHA256

e78882fa18cadb5afe2b4d8ca10e2cacf31f2b976a8778c2453b6ca7c8bfb72e
SHA512

c5a6aeff684a7a6bd5e1eb786ef73a27779cef7d206e2d329e94ffa5c4305e1dc5e0344ad9af32a27195fee7be239bafa6a4db4e677dbfd64dc37e45cc0b630d
SSDEEP

98304:4kVUVoixbEdAxsJvymBQgbbQkmzwPrkdbnMzr6aRVOGLsfLUi1YM0SyBCqNw6v30:kxbEdAxsJvymBQgbbQkmzwPrkdbnMzrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e78882fa18cadb5afe2b4d8ca10e2cacf31f2b976a8778c2453b6ca7c8bfb72e

Files

e78882fa18cadb5afe2b4d8ca10e2cacf31f2b976a8778c2453b6ca7c8bfb72e
.exe windows:6 windows x86 arch:x86

8c89df5fe3ac942fe6ea761f3b60d6df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Case\FantasiaSangoMaintenance\FantasiaSango1\exe-chs\FS_SP.pdb

Imports

mss32

_AIL_mem_free_lock@4
_AIL_redbook_set_volume_level@8
_AIL_redbook_resume@4
_AIL_redbook_pause@4
_AIL_redbook_stop@4
_AIL_redbook_play@12
_AIL_redbook_track_info@16
_AIL_redbook_tracks@4
_AIL_redbook_status@4
_AIL_redbook_retract@4
_AIL_redbook_eject@4
_AIL_redbook_close@4
_AIL_redbook_open_drive@4
_AIL_redbook_open@4
_AIL_set_3D_orientation@28
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_set_3D_sample_effects_level@8
_AIL_set_3D_sample_preference@12
_AIL_set_3D_sample_distances@12
_AIL_set_3D_speaker_type@8
_AIL_set_3D_room_type@8
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_WAV_info@8
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_start_stream@4
_AIL_service_stream@8
_AIL_close_stream@4
_AIL_open_stream@12
_AIL_sample_status@4
_AIL_set_sample_volume_levels@12
_AIL_end_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_set_redist_directory@4
_AIL_open_digital_driver@16
_AIL_shutdown@0
_AIL_startup@0
_AIL_file_read@8
_AIL_mem_alloc_lock@4

binkw32

_BinkDoFrame@4
_BinkDDSurfaceType@4
_BinkOpenMiles@4
_BinkOpenDirectSound@4
_BinkSetSoundSystem@8
_BinkGoto@12
_BinkCopyToBuffer@28
_BinkClose@4
_BinkWait@4
_BinkNextFrame@4
_BinkOpen@8

dsound

ord2

winmm

timeGetTime

imm32

ImmGetConversionStatus
ImmGetCompositionStringA
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmSetConversionStatus

kernel32

SetStdHandle
FlushFileBuffers
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
GetModuleHandleExW
SetFilePointerEx
QueryPerformanceFrequency
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
LoadLibraryExW
SetFileTime
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetConsoleMode
ReadConsoleW
GetStartupInfoW
IsDebuggerPresent
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleFileNameW
GetStdHandle
TlsFree
CreateFileA
ReadFile
SetFilePointer
CloseHandle
CreateDirectoryA
GetLocalTime
GetDriveTypeA
FreeLibrary
GetConsoleOutputCP
LoadLibraryA
GlobalMemoryStatus
DeleteFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
CompareFileTime
FileTimeToLocalFileTime
GetFileTime
FileTimeToSystemTime
GetModuleHandleA
GlobalUnlock
GlobalLock
GetDiskFreeSpaceExA
GetLogicalDrives
GetSystemTime
GetComputerNameA
OutputDebugStringA
SetEvent
WaitForSingleObject
OpenEventA
MapViewOfFile
CreateFileMappingA
ExitProcess
GetLastError
LocalFree
FormatMessageA
UnmapViewOfFile
GetCurrentDirectoryA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileSize
SetFileAttributesA
GetTempPathA
GetTempFileNameA
MoveFileA
SetVolumeLabelA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
WideCharToMultiByte
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
SetEndOfFile
HeapFree
HeapAlloc
GetCurrentThread
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
HeapReAlloc
GetTimeZoneInformation
GetFullPathNameW
SetConsoleCtrlHandler
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
OutputDebugStringW
HeapSize
GetProcAddress
InitializeSListHead
WriteConsoleW
IsProcessorFeaturePresent

user32

LoadImageA
wvsprintfA
SystemParametersInfoA
GetWindowLongA
FrameRect
AdjustWindowRectEx
ReleaseDC
GetDC
GetMenu
ScreenToClient
GetCursorPos
SetKeyboardState
GetKeyboardState
EmptyClipboard
GetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayout
wsprintfA
PostMessageA
LoadIconA
ShowCursor
EndPaint
BeginPaint
GetForegroundWindow
CharToOemBuffA
RegisterClassA
DefWindowProcA
WaitMessage
GetMessagePos
GetDesktopWindow
ClientToScreen
GetWindowRect
GetClientRect
ShowScrollBar
SetForegroundWindow
SetWindowPos
CreateWindowExA
SetCursorPos
DispatchMessageA
TranslateMessage
LoadCursorA
SetCursor
MessageBoxA
PeekMessageA
GetMessageA
OffsetRect
IntersectRect
CopyRect
GetKeyState
SetRect
DestroyWindow
OemToCharBuffA

gdi32

SetTextCharacterExtra
SetBkMode
TextOutA
CreateFontA
GetObjectA
GetBitmapBits
MoveToEx
SetStretchBltMode
StretchDIBits
SetPixel
SelectObject
LineTo
GetPixel
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreatePen
SetTextColor
GetStockObject

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegSetValueExA

ddraw

DirectDrawCreateEx
DirectDrawCreate
DirectDrawEnumerateA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetReadFile

Exports

Exports

?SFLB_InitDefaultData@DefaultDataClass@@IAAXXZ
?SFLB_InitFileSystemData@MenuSaveLoadFileClass@@QAAXW4FILESAVELOAD_TYPE@@PAVPeopleClass@@@Z
?SFLB_InitSystemSetupData@MenuSystemSetupClass@@QAAXXZ
?SFLB_InitTradeMenuSurface@MenuTradeClass@@AAAXXZ
?SFLB_ProcessAutoSave@MainMenuSelectClass@@QAAHPAVPeopleClass@@@Z
?SFLB_ProcessEndUpGrade@RoleUpGrageClass@@AAAXXZ

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 12.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c89df5fe3ac942fe6ea761f3b60d6df

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mss32

binkw32

dsound

winmm

imm32

kernel32

user32

gdi32

comdlg32

advapi32

ddraw

wininet

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 268KB - Virtual size: 268KB

.data Size: 30KB - Virtual size: 12.4MB

.idata Size: 11KB - Virtual size: 11KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 270B

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 115KB - Virtual size: 114KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 268KB - Virtual size: 268KB

.data
Size: 30KB - Virtual size: 12.4MB

.idata
Size: 11KB - Virtual size: 11KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 270B

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 115KB - Virtual size: 114KB