PlayKey[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PlayKey.7z
Size

114.9MB
MD5

dcaf82b71a8472cb968f1129b47c8238
SHA1

a235c96965207896d2c0eff11fca91b4faecffc6
SHA256

96da693304b01e4732b0280633850accdbeece78049dae4157c631cc4d12ced6
SHA512

955c1799ce9f71ba9856a17ffb643800e80ab679678f13419e56f465b3634b6164342a5e14769757fc8ed686f90a4f8d25984a870d08e513383a1d04ff1ccbf6
SSDEEP

3145728:G5he8dgUGCV/b1HOTEK8HJ9tHb/TbXXEyUq3h:2hZx1sJYJ9tHbXEyUqR

Score

1^/10

Malware Config

Signatures

Files

PlayKey.7z
.7z

Password: playkey
PlayKey/About PlayKey/PLAYKEY Cloud Gaming _ SETUP and Getting Started.mp4
PlayKey/About PlayKey/PlayKey - What is it Does It Work Where can I use it.mp4
PlayKey/About PlayKey/THE FUTURE OF PLAYING VIDEO GAMES - Playkey.mp4
PlayKey/Contract/Contract Advertising terms playkey for the month of April 2024.exe
.exe windows:6 windows x86 arch:x86

Password: playkey

8fec26de9958838ab51732e066ce57e7

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

06/03/2024, 08:47

Not After

07/03/2025, 08:47

Subject

SERIALNUMBER=91330103MA28W1DR98,CN=Burnoris Niraver Hirtuden Technolog Co.\, Ltd.,O=Burnoris Niraver Hirtuden Technolog Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130848616e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07/11/2023, 17:13

Not After

09/12/2034, 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fd:02:ce:54:2c:d1:f5:6c:0e:80:d1:68:da:9a:07:1a:d9:d6:5b:42:4d:cc:d9:61:dd:6c:ae:03:86:12:c8:e3
Signer

Actual PE Digest

fd:02:ce:54:2c:d1:f5:6c:0e:80:d1:68:da:9a:07:1a:d9:d6:5b:42:4d:cc:d9:61:dd:6c:ae:03:86:12:c8:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetOpenStatus
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetContext
ImmGetDefaultIMEWnd

oleaut32

SysAllocString
SafeArrayCreateVector
SysFreeString
SafeArrayPutElement

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiGetClassDevsW
SetupDiOpenDevRegKey

shlwapi

AssocQueryStringW

winspool.drv

ord203
OpenPrinterW
GetPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
DeviceCapabilitiesW

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor
GetProcessDpiAwareness
SetProcessDpiAwareness

comdlg32

PrintDlgExW
GetOpenFileNameW
GetSaveFileNameW

d3d9

Direct3DCreate9

dwmapi

DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute

uxtheme

GetThemeEnumValue
GetThemeMargins
GetThemePropertyOrigin
SetWindowTheme
IsThemeActive
IsAppThemed
GetThemeInt
GetThemeTransitionDuration
OpenThemeData
IsThemeBackgroundPartiallyTransparent
GetThemeBool
CloseThemeData
GetThemePartSize
GetThemeBackgroundRegion
ord47
GetCurrentThemeName
GetThemeColor

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory2

dcomp

DCompositionCreateDevice

gdi32

GetDIBits
GetBitmapBits
SwapBuffers
GetPixelFormat
DescribePixelFormat
CreateBitmap
CreateCompatibleBitmap
SetLayout
OffsetRgn
SetPixelFormat
ChoosePixelFormat
BitBlt
PolyBezierTo
MoveToEx
GetObjectW
ExtCreatePen
StrokePath
SelectClipPath
FillPath
EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
StretchBlt
SetPolyFillMode
CombineRgn
CreateRectRgn
DeleteObject
GetRegionData
DeleteDC
GetStockObject
CreateCompatibleDC
CreateFontIndirectW
EnumFontFamiliesExW
GetFontData
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
SelectObject
GetTextMetricsW
GetTextFaceW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetTextExtentPoint32W
GetCharWidthI
GetCharABCWidthsI
SetBkMode
SetGraphicsMode
SetTextColor
SetTextAlign
SetWorldTransform
ExtTextOutW
GetDeviceCaps
CreateDIBSection
GdiFlush
CreateDCW
CreatePen
CreateSolidBrush
ExtEscape
GetBkMode
LineTo
RestoreDC
ResetDCW
SaveDC
SelectClipRgn

dwrite

DWriteCreateFactory

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

userenv

GetUserProfileDirectoryW

advapi32

RegEnumKeyExW
OpenProcessToken
AddAccessAllowedAceEx
AddAccessDeniedAceEx
AllocateAndInitializeSid
CopySid
DuplicateToken
FreeSid
GetLengthSid
SystemFunction036
GetSidSubAuthorityCount
GetSidSubAuthority
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
GetTokenInformation
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetNamedSecurityInfoW
LookupAccountSidW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl

authz

AuthzFreeContext
AuthzAccessCheck
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzInitializeContextFromToken
AuthzInitializeContextFromSid

kernel32

DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
LoadLibraryExW
GetCommandLineA
ExitProcess
FreeLibraryAndExitThread
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFileAttributesW
SetStdHandle
GetStdHandle
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
HeapReAlloc
SetEnvironmentVariableW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
WriteConsoleW
GetSystemDirectoryW
GetUserDefaultLocaleName
EncodePointer
GetSystemTimeAsFileTime
ExitThread
CompareStringEx
GetCommandLineW
GetCurrentProcessId
LocalFree
AllocConsole
FreeConsole
AttachConsole
GetStartupInfoW
GetConsoleWindow
OutputDebugStringW
GetLastError
CloseHandle
DuplicateHandle
SetEvent
WaitForSingleObject
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
TerminateThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetACP
TerminateProcess
IsProcessorFeaturePresent
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTime
GetLocalTime
CreateFileW
GetFileAttributesExW
LocalAlloc
FormatMessageW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetLogicalDrives
GetLongPathNameW
RemoveDirectoryW
SetFileTime
GetTempPathW
GetVolumePathNamesForVolumeNameW
SetErrorMode
DeviceIoControl
CopyFileW
MoveFileW
MoveFileExW
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetFileInformationByHandleEx
FlushFileBuffers
GetDriveTypeW
GetFileType
GetVolumeInformationW
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetCurrencyFormatW
GetUserDefaultLCID
GetUserPreferredUILanguages
ResetEvent
WaitForSingleObjectEx
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
GetTimeZoneInformation
GetCurrentPackageFullName
GetGeoInfoW
GetUserGeoID
FindFirstFileExW
FindNextFileW
GetExitCodeProcess
OpenProcess
K32GetModuleFileNameExW
GetUserDefaultLangID
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetFileSizeEx
WTSGetActiveConsoleSessionId
GlobalSize
CheckRemoteDebuggerPresent
ExpandEnvironmentStringsW
CreateProcessW
LoadLibraryA
lstrcmpW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RaiseException
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
VirtualFree
VirtualAlloc
CreateMutexW
ReleaseMutex

netapi32

NetShareEnum
NetApiBufferFree

ole32

OleUninitialize
ReleaseStgMedium
CoLockObjectExternal
StringFromGUID2
RevokeDragDrop
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CoCreateInstance
CoCreateGuid
CoIncrementMTAUsage
CoTaskMemFree
CoGetMalloc
OleInitialize
RegisterDragDrop
CoInitializeEx
DoDragDrop

user32

GetDoubleClickTime
IsWindow
MessageBeep
GetCaretBlinkTime
GetDesktopWindow
DestroyIcon
UpdateLayeredWindowIndirect
GetKeyboardLayoutList
RegisterWindowMessageW
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
GetClassInfoW
RegisterClassExW
SetWindowPos
GetWindowPlacement
IsZoomed
GetFocus
InvalidateRect
GetClientRect
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
ChildWindowFromPointEx
GetParent
LoadImageW
GetThreadDpiAwarenessContext
GetWindowDpiAwarenessContext
GetAwarenessFromDpiAwarenessContext
AreDpiAwarenessContextsEqual
EnableNonClientDpiScaling
SetProcessDpiAwarenessContext
ChangeWindowMessageFilter
RegisterClipboardFormatW
GetClipboardFormatNameW
EnumDisplayDevicesW
SendMessageW
AttachThreadInput
IsChild
ShowWindow
UpdateLayeredWindow
SetLayeredWindowAttributes
FlashWindowEx
MoveWindow
SetWindowPlacement
IsWindowVisible
IsIconic
SetFocus
RegisterTouchWindow
UnregisterTouchWindow
IsTouchWindow
GetCapture
SetCapture
ReleaseCapture
GetSystemMetricsForDpi
GetMenu
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRect
SetWindowRgn
SetWindowTextW
GetWindowRect
AdjustWindowRectEx
AdjustWindowRectExForDpi
SetCursor
GetSystemMenu
GetWindowThreadProcessId
GetSystemMetrics
DestroyCursor
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetDpiForWindow
GetAncestor
LoadIconW
IsHungAppWindow
SetClipboardViewer
ChangeClipboardChain
AddClipboardFormatListener
RemoveClipboardFormatListener
SetMenu
DrawMenuBar
CreateMenu
CreatePopupMenu
DestroyMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
EnumDisplayMonitors
SetDisplayAutoRotationPreferences
GetMessageW
SendInput
GetPointerInfo
GetKeyboardLayout
IsWindowEnabled
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
FindWindowA
GetKeyState
GetKeyboardState
ToAscii
ToUnicode
MapVirtualKeyW
ReleaseDC
TrackPopupMenuEx
SetMenuDefaultItem
SetCursorPos
GetCursor
LoadCursorW
CreateCursor
CreateIconIndirect
GetIconInfo
GetCursorInfo
TrackMouseEvent
GetMessageExtraInfo
GetAsyncKeyState
GetTouchInputInfo
CloseTouchInputHandle
GetPointerType
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerPenInfo
GetPointerPenInfoHistory
SkipPointerFrameMessages
GetPointerDeviceRects
ChangeWindowMessageFilterEx
GetDC
GetSysColor
GetWindow
SystemParametersInfoForDpi
SystemParametersInfoW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetWindowLongW
GetWindowLongW
KillTimer
SetCoalescableTimer
EnableMenuItem
SetTimer
MsgWaitForMultipleObjectsEx
DrawIconEx
GetQueueStatus
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
CharNextExA
MessageBoxW
SetParent
HiliteMenuItem

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

timeKillEvent
timeSetEvent
PlaySoundW

ws2_32

WSAAsyncSelect

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

shell32

ShellExecuteW
Shell_NotifyIconW
ord727
SHCreateItemFromIDList
SHGetMalloc
CommandLineToArgvW
SHGetKnownFolderPath
SHCreateItemFromParsingName
SHGetFileInfoW
Shell_NotifyIconGetRect
SHGetStockIconInfo
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetKnownFolderIDList

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Exports

Exports

qt_startup_hook

Sections

.text
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 406KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmimed
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PlayKey/Contract/Contract For MAC OS users/PlayKeyContract.dmg
.dmg macos

Password: playkey
PlayKeyContract/.DS_Store
PlayKeyContract/.VolumeIcon.icns
PlayKeyContract/.background/backm.png
.png

Password: playkey
PlayKeyContract/.background/backm.png:com.apple.macl
PlayKeyContract/.background/backm.png:com.apple.metadata_kMDItemWhereFroms
PlayKeyContract/.background/backm.png:com.apple.provenance
PlayKeyContract/.background/backm.png:com.apple.quarantine
PlayKeyContract/PlayKeyContract
.macho macos arch:arm64 arch:x64
PlayKeyContract/PlayKeyContract:rsrc
PlayKey/Install PlayKey.exe
.exe windows:6 windows x86 arch:x86

Password: playkey

2deb743ba64e723603f65e8f269f6b9e

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

06/03/2024, 08:47

Not After

07/03/2025, 08:47

Subject

SERIALNUMBER=91330103MA28W1DR98,CN=Burnoris Niraver Hirtuden Technolog Co.\, Ltd.,O=Burnoris Niraver Hirtuden Technolog Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130848616e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07/11/2023, 17:13

Not After

09/12/2034, 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:30:d6:ed:bc:31:8d:9e:d1:fe:af:6d:21:6e:71:4d:90:20:0e:29:b1:84:98:15:e4:6e:cb:00:50:79:1e:ad
Signer

Actual PE Digest

f7:30:d6:ed:bc:31:8d:9e:d1:fe:af:6d:21:6e:71:4d:90:20:0e:29:b1:84:98:15:e4:6e:cb:00:50:79:1e:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetOpenStatus
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetContext
ImmGetDefaultIMEWnd

oleaut32

SysAllocString
SafeArrayCreateVector
SafeArrayPutElement
SysFreeString

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInterfaceW

shlwapi

AssocQueryStringW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness
GetProcessDpiAwareness
GetDpiForMonitor

comdlg32

GetSaveFileNameW
GetOpenFileNameW

d3d9

Direct3DCreate9

dwmapi

DwmSetWindowAttribute
DwmGetWindowAttribute
DwmDefWindowProc
DwmExtendFrameIntoClientArea
DwmEnableBlurBehindWindow

uxtheme

OpenThemeData
CloseThemeData
ord47
GetThemeBackgroundRegion
GetThemePartSize
DrawThemeTextEx
SetWindowThemeAttribute
GetThemeSysFont
DrawThemeBackground
GetThemeTransitionDuration
GetCurrentThemeName
IsAppThemed
IsThemeActive
SetWindowTheme
GetThemePropertyOrigin
GetThemeMargins
GetThemeEnumValue
GetThemeInt
GetThemeBool
GetThemeColor
IsThemeBackgroundPartiallyTransparent

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory2

dcomp

DCompositionCreateDevice

gdi32

ExtTextOutW
SetWorldTransform
SetTextAlign
SetTextColor
SetGraphicsMode
SetBkMode
GetCharABCWidthsI
GetCharWidthI
GetTextExtentPoint32W
GetOutlineTextMetricsW
GetGlyphOutlineW
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetStockObject
GetTextFaceW
GetTextMetricsW
RemoveFontMemResourceEx
AddFontMemResourceEx
RemoveFontResourceExW
AddFontResourceExW
GetFontData
EnumFontFamiliesExW
GetDIBits
CreateFontIndirectW
GdiFlush
CreateDIBSection
SelectClipRgn
BitBlt
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
CombineRgn
CreateRectRgn
DeleteObject
OffsetRgn
SetLayout
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
DeleteDC
SelectObject
CreateBitmap
DescribePixelFormat
GetPixelFormat
SwapBuffers
GetBitmapBits
GetObjectW
GetRegionData

dwrite

DWriteCreateFactory

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WakeByAddressAll
WaitOnAddress

userenv

GetUserProfileDirectoryW

advapi32

SystemFunction036
CopySid
DuplicateToken
FreeSid
AddAccessDeniedAceEx
AddAccessAllowedAceEx
OpenProcessToken
GetLengthSid
GetSidSubAuthorityCount
GetSidSubAuthority
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetTokenInformation
GetNamedSecurityInfoW
LookupAccountSidW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
AllocateAndInitializeSid

authz

AuthzAccessCheck
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzInitializeContextFromToken
AuthzInitializeContextFromSid
AuthzFreeContext

kernel32

WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
RaiseException
TryEnterCriticalSection
IsValidCodePage
VirtualFree
VirtualAlloc
CreateMutexW
ReleaseMutex
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
InitializeCriticalSectionEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
WriteConsoleW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SetEnvironmentVariableW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetOEMCP
CompareStringW
CompareStringEx
OutputDebugStringW
GetConsoleWindow
GetCommandLineW
GetCurrentProcessId
LocalFree
AllocConsole
FreeConsole
AttachConsole
GetLastError
CloseHandle
DuplicateHandle
SetEvent
WaitForSingleObject
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
TerminateThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetSystemTime
GetLocalTime
CreateFileW
GetFileAttributesExW
LocalAlloc
FormatMessageW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetLogicalDrives
GetLongPathNameW
RemoveDirectoryW
SetFileTime
GetTempPathW
GetVolumePathNamesForVolumeNameW
SetErrorMode
DeviceIoControl
CopyFileW
MoveFileW
MoveFileExW
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetFileInformationByHandleEx
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
GetDriveTypeW
ReadFile
ResetEvent
WaitForSingleObjectEx
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetCurrencyFormatW
GetUserDefaultLCID
GetUserPreferredUILanguages
GetTimeZoneInformation
FlushFileBuffers
GetFileType
GetVolumeInformationW
SetEndOfFile
SetFilePointerEx
WriteFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentPackageFullName
GetGeoInfoW
GetUserGeoID
FindFirstFileExW
FindNextFileW
GetExitCodeProcess
OpenProcess
K32GetModuleFileNameExW
GetFileSizeEx
WTSGetActiveConsoleSessionId
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
CheckRemoteDebuggerPresent
ExpandEnvironmentStringsW
CreateProcessW
LoadLibraryA
lstrcmpW
GetUserDefaultLocaleName
GetUserDefaultLangID
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
HeapReAlloc
HeapAlloc
InterlockedFlushSList
HeapFree
GetStdHandle
ExitProcess
SetStdHandle
SetFileAttributesW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
FreeLibraryAndExitThread
ExitThread
GetCommandLineA
LoadLibraryExW
SetLastError
SetUnhandledExceptionFilter

netapi32

NetApiBufferFree
NetShareEnum

ole32

CoCreateGuid
CoLockObjectExternal
RegisterDragDrop
ReleaseStgMedium
CoCreateInstance
CoUninitialize
OleInitialize
CoInitializeEx
OleUninitialize
RevokeDragDrop
OleSetClipboard
OleGetClipboard
CoIncrementMTAUsage
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoGetMalloc
StringFromGUID2
CoTaskMemFree

user32

RegisterPowerSettingNotification
UnregisterPowerSettingNotification
GetClassInfoW
RegisterClassExW
SetWindowPos
GetWindowPlacement
IsZoomed
GetFocus
GetSystemMetrics
GetDC
ReleaseDC
InvalidateRect
GetClientRect
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
ChildWindowFromPointEx
GetParent
LoadImageW
SystemParametersInfoForDpi
GetThreadDpiAwarenessContext
GetWindowDpiAwarenessContext
GetAwarenessFromDpiAwarenessContext
AreDpiAwarenessContextsEqual
EnableNonClientDpiScaling
SetProcessDpiAwarenessContext
ChangeWindowMessageFilter
RegisterClipboardFormatW
GetClipboardFormatNameW
EnumDisplayDevicesW
SendMessageW
AttachThreadInput
IsChild
ShowWindow
UpdateLayeredWindow
SetLayeredWindowAttributes
FlashWindowEx
MoveWindow
SetWindowPlacement
IsWindowVisible
IsIconic
SetFocus
RegisterTouchWindow
UnregisterTouchWindow
IsTouchWindow
GetCapture
SetCapture
ReleaseCapture
GetSystemMetricsForDpi
GetMenu
GetSystemMenu
EnableMenuItem
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRect
SetWindowRgn
SetWindowTextW
GetWindowRect
AdjustWindowRectEx
AdjustWindowRectExForDpi
SetCursor
SetParent
GetWindowThreadProcessId
GetWindow
SystemParametersInfoW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetDpiForWindow
GetAncestor
RegisterWindowMessageW
LoadIconW
IsHungAppWindow
SetClipboardViewer
ChangeClipboardChain
AddClipboardFormatListener
RemoveClipboardFormatListener
SetMenu
DrawMenuBar
CreateMenu
CreatePopupMenu
DestroyMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
EnumDisplayMonitors
SetDisplayAutoRotationPreferences
GetMessageW
SendInput
GetPointerInfo
GetKeyboardLayout
IsWindowEnabled
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
FindWindowA
GetKeyState
GetKeyboardState
ToAscii
ToUnicode
MapVirtualKeyW
HiliteMenuItem
TrackPopupMenuEx
SetMenuDefaultItem
SetCursorPos
GetCursor
LoadCursorW
CreateCursor
CreateIconIndirect
GetIconInfo
GetCursorInfo
TrackMouseEvent
GetMessageExtraInfo
GetAsyncKeyState
GetTouchInputInfo
CloseTouchInputHandle
GetPointerType
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerPenInfo
GetPointerPenInfoHistory
SkipPointerFrameMessages
GetPointerDeviceRects
ChangeWindowMessageFilterEx
DrawIconEx
MessageBoxW
DestroyIcon
GetDesktopWindow
GetCaretBlinkTime
MessageBeep
IsWindow
GetDoubleClickTime
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetWindowLongW
GetWindowLongW
GetKeyboardLayoutList
GetSysColor
UpdateLayeredWindowIndirect
KillTimer
SetCoalescableTimer
SetTimer
MsgWaitForMultipleObjectsEx
GetQueueStatus
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
CharNextExA
DestroyCursor

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

timeKillEvent
PlaySoundW
timeSetEvent

ws2_32

WSAAsyncSelect

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

shell32

Shell_NotifyIconGetRect
ord727
SHCreateItemFromIDList
SHGetStockIconInfo
CommandLineToArgvW
SHCreateItemFromParsingName
SHGetKnownFolderPath
SHGetFileInfoW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHGetKnownFolderIDList
Shell_NotifyIconW
SHBrowseForFolderW

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Exports

Exports

qt_startup_hook

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 423KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmimed
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PlayKey/Playkey-1.jpg
.jpg

Password: playkey
PlayKey/Playkey-750x430.jpg
.jpg

Password: playkey
PlayKey/Promotional video/Promotional Video.mp4
PlayKey/dmarket-playkey-partnership.jpg
.jpg

Password: playkey
PlayKey/gettingstartedplaykey_small.png
.png

Password: playkey
PlayKey/pklogo-alight.png
.png
PlayKey/playkey anime logo.jpg
.jpg
PlayKey/playkey tokens.jpg
.jpg
PlayKey/playkey-decentralized-gaming-platform.jpg
.jpg
PlayKey/playkey.jpeg
PlayKey/playkey.jpg
.jpg

Sharing

General

Malware Config

Signatures

Files

Password: playkey

Password: playkey

8fec26de9958838ab51732e066ce57e7

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

fd:02:ce:54:2c:d1:f5:6c:0e:80:d1:68:da:9a:07:1a:d9:d6:5b:42:4d:cc:d9:61:dd:6c:ae:03:86:12:c8:e3Signer

Headers

DLL Characteristics

File Characteristics

Imports

imm32

oleaut32

setupapi

shlwapi

winspool.drv

wtsapi32

api-ms-win-shcore-scaling-l1-1-1

comdlg32

d3d9

dwmapi

uxtheme

d3d11

dxgi

dcomp

gdi32

dwrite

api-ms-win-core-synch-l1-2-0

userenv

advapi32

authz

kernel32

netapi32

ole32

user32

version

winmm

ws2_32

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

shell32

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

Exports

Exports

Sections

.text Size: 10.5MB - Virtual size: 10.5MB

.rdata Size: 3.0MB - Virtual size: 3.0MB

.data Size: 406KB - Virtual size: 465KB

.qtmimed Size: 332KB - Virtual size: 331KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 342KB - Virtual size: 342KB

Password: playkey

Password: playkey

Password: playkey

2deb743ba64e723603f65e8f269f6b9e

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

fd:02:ce:54:2c:d1:f5:6c:0e:80:d1:68:da:9a:07:1a:d9:d6:5b:42:4d:cc:d9:61:dd:6c:ae:03:86:12:c8:e3
Signer

.text
Size: 10.5MB - Virtual size: 10.5MB

.rdata
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 406KB - Virtual size: 465KB

.qtmimed
Size: 332KB - Virtual size: 331KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 342KB - Virtual size: 342KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

50:ca:05:de:a0:6f:5a:74:4d:4d:12:b8
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

f7:30:d6:ed:bc:31:8d:9e:d1:fe:af:6d:21:6e:71:4d:90:20:0e:29:b1:84:98:15:e4:6e:cb:00:50:79:1e:ad
Signer

.text
Size: 10.9MB - Virtual size: 10.9MB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 423KB - Virtual size: 483KB

.qtmimed
Size: 332KB - Virtual size: 331KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 367KB - Virtual size: 366KB