Sonic-Adventure-2_Win_EN[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Sonic-Adventure-2_Win_EN.zip
Size

1.1MB
MD5

bae472b9be37ba86a321edea26186124
SHA1

d2e54c31b6983424706229c1bebd5e2a8b0d4b89
SHA256

b0c2bdebfcd961366b85d0078a262e88718e3a9893652c059b4dcb1b830a2645
SHA512

75ad18d4b0a0069778d5b070d7709cf1ecbf3d55eb61df193e0a4928a5c8429a45fddc21dbd53b7ad7515d0d97c88edd97ddb57fab428a54bbe6bc38e3fbc7a8
SSDEEP

24576:2PCSLpdi7LdUHXksLWGoiF/3GCupgvrGUqzQrIUNa:WCSdc7uHXxWOF/WxWjGb8sUNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cncs232.dll
unpack001/Sonic Adventure 2.exe

Files

Sonic-Adventure-2_Win_EN.zip
.zip
Cncs232.dll
.dll windows:4 windows x86 arch:x86

60295ba7e92b024ab63f2e367b68363f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mciSendCommandA
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutOpen
timeGetTime
waveOutClose
timeKillEvent
timeGetDevCaps
timeSetEvent

kernel32

SetFilePointer
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
FreeResource
LockResource
GlobalDeleteAtom
OutputDebugStringA
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
WriteFile
GetFileType
SetHandleCount
RaiseException
GetCurrentProcess
TerminateProcess
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
ExitProcess
GetCommandLineA
HeapSize
HeapReAlloc
HeapCompact
HeapFree
HeapAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
ReadFile
CreateFileA
GetLastError
GlobalSize
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalLock
lstrcatA
GetModuleHandleA
GetPrivateProfileIntA
lstrcpyA
SetCurrentDirectoryA
GetCurrentDirectoryA
DeleteCriticalSection
GetModuleFileNameA
InitializeCriticalSection
GetSystemInfo
IsBadWritePtr
LocalFree
LocalAlloc
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
GlobalFree
GetVersion
lstrcmpA
IsBadReadPtr
GlobalAddAtomA
GetProfileStringA
lstrcmpiA
GetCurrentThreadId
lstrlenA
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
GetStdHandle
SetEnvironmentVariableA

user32

LoadBitmapA
SetFocus
SetCapture
GetCapture
ReleaseCapture
GetDlgCtrlID
SendDlgItemMessageA
GetDlgItem
EnumChildWindows
DefFrameProcA
DefMDIChildProcA
IsIconic
FillRect
GetTabbedTextExtentA
IsDialogMessageA
TranslateMDISysAccel
SetRect
DispatchMessageA
GetMessageA
PeekMessageA
CopyRect
GetKeyState
PostMessageA
SetCursor
SetWindowPos
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMenuState
GetSubMenu
ModifyMenuA
SetMenu
ShowWindow
FrameRect
PtInRect
CreateDialogParamA
DialogBoxParamA
ChangeDisplaySettingsA
TranslateMessage
UpdateWindow
AdjustWindowRectEx
LoadCursorA
CreateWindowExA
DestroyWindow
EnumDisplaySettingsA
RegisterClassA
HideCaret
MapWindowPoints
ShowCaret
BeginPaint
EndPaint
ExcludeUpdateRgn
GetWindowTextA
ClientToScreen
IsWindowEnabled
DrawTextA
GetFocus
IntersectRect
DrawFocusRect
GetParent
ScreenToClient
GetClassNameA
CallNextHookEx
InvalidateRect
GetSysColor
GetDC
GetSystemMetrics
GetClassInfoA
DefWindowProcA
GetWindowDC
GetWindowRect
InflateRect
OffsetRect
ReleaseDC
GetWindowLongA
IsChild
GetWindow
SetWindowsHookExA
UnhookWindowsHookEx
CharNextA
GetClientRect
RemovePropA
CallWindowProcA
SendMessageA
SetWindowLongA
SetPropA
GetPropA
TranslateAcceleratorA

gdi32

PatBlt
DeleteObject
GetTextExtentPointA
SetTextColor
SelectObject
GetDeviceCaps
CreateSolidBrush
DeleteDC
BitBlt
CreateCompatibleDC
SetBkMode
CreateDIBitmap
SetPixel
GetPixel
GetSystemPaletteEntries
SelectPalette
GetStockObject
CreatePen
CreateFontIndirectA
CreatePalette
SetBkColor
GetPaletteEntries
LineTo
MoveToEx
SetTextAlign
TextOutA
GetClipBox
GetTextMetricsA
GetObjectA
CreateCompatibleBitmap
Ellipse
Rectangle
Polygon
SetWindowOrgEx
StretchBlt
CreateDIBSection
SetDIBColorTable
Polyline
SetROP2
GdiFlush
RealizePalette
IntersectClipRect
ExtTextOutA

comctl32

ord17

msacm32

acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmStreamOpen

Exports

Exports

BtnWndProc3d
ComboWndProc3d
Ctl3dAutoSubclass
Ctl3dColorChange
Ctl3dCtlColor
Ctl3dCtlColorEx
Ctl3dDlgFramePaint
Ctl3dDlgProc
Ctl3dEnabled
Ctl3dGetVer
Ctl3dRegister
Ctl3dSetStyle
Ctl3dSubclassCtl
Ctl3dSubclassDlg
Ctl3dSubclassDlgEx
Ctl3dUnregister
Ctl3dWinIniChange
EditWndProc3d
ListWndProc3d
StaticWndProc3d
_CusTabProc@16
_KnpDirectionProc@16

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT_TEX
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sonic Adventure 2.exe
.exe windows:4 windows x86 arch:x86

ef893fe6ebdc4dbc60cc375e89b7a953

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cncs232

ord24
ord64
ord18
ord32
ord16
ord19
ord56
ord81
ord158
ord206
ord57
ord6
ord23
ord176
ord2
ord33
ord36
ord186
ord151
ord149
ord3
ord105
ord193
ord200
ord335
ord336
ord191
ord188
ord179
ord366
ord334
ord390
ord340
ord375
ord387
ord363
ord199
ord108
ord55
ord338
ord374
ord120
ord196
ord195
ord89
ord165
ord435
ord189
ord192
ord154
ord90
ord313
ord312
ord311
ord351
ord350
ord411
ord410
ord187
ord307
ord308
ord352
ord333
ord310
ord303
ord349
ord361
ord409
ord348
ord408
ord392
ord347
ord407
ord305
ord299
ord94
ord92
ord93
ord109
ord163
ord91
ord140
ord52
ord168
ord138
ord162
ord132
ord107
ord129
ord414
ord71
ord78
ord77
ord76
ord61
ord125
ord79
ord70
ord69
ord60
ord62
ord98
ord133
ord75
ord34
ord35
ord12
ord68
ord48
ord150
ord346
ord54
ord115
ord169
ord143
ord50
ord65
ord116
ord178
ord177
ord80
ord106
ord171
ord173
ord172
ord112
ord113
ord114
ord86
ord96
ord160
ord30
ord29
ord117
ord118
ord119
ord111
ord95
ord88
ord161
ord136
ord83
ord67
ord170
ord412
ord103
ord156
ord372
ord174
ord391
ord66
ord58

winmm

joyGetPos

kernel32

WriteFile
SetFilePointer
CreateFileA
_lread
_lwrite
GetTickCount
ReadFile
CloseHandle
GetLastError
LockResource
lstrlen
GetCommandLineA
_hread
_llseek
lstrcpyA
lstrcatA
lstrcmpA
lstrcpynA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
GlobalReAlloc
GlobalAlloc
lstrlenA
GetExitCodeProcess
CreateProcessA
GetTempPathA
GetTempFileNameA
GlobalDeleteAtom
GetVersion
GlobalAddAtomA
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
_lopen
_lclose
SetErrorMode
GetProcAddress
FreeLibrary
RemoveDirectoryA
GetModuleFileNameA
WinExec
LocalAlloc
LocalFree
FindResourceA
SizeofResource
LoadResource
lstrcpy
FreeResource
lstrcmp
lstrcat
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RaiseException
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
SetEnvironmentVariableA
DeleteFileA
HeapSize
HeapFree
HeapReAlloc
HeapCompact
HeapAlloc
RtlUnwind
CompareStringA
CompareStringW
SetEndOfFile

user32

CreateWindowExA
UnionRect
GetSysColor
SetScrollRange
DrawFocusRect
SetRect
InvertRect
OemToCharA
PtInRect
MessageBoxA
SetWindowTextA
GetDlgItem
wsprintfA
MapVirtualKeyA
GetInputState
PeekMessageA
SetTimer
LoadStringA
SetDlgItemTextA
KillTimer
SetFocus
DestroyWindow
SetScrollPos
GetDlgItemTextA
EndDialog
GetKeyState
PostMessageA
IsZoomed
GetWindowRect
GetMenu
DestroyMenu
LoadMenuA
LoadMenuIndirectA
GetMenuItemCount
DeleteMenu
SetWindowPlacement
IsWindowVisible
ShowWindow
GetWindowPlacement
SetWindowPos
GetMenuState
CheckMenuItem
InvalidateRect
SetCursorPos
GetCursorPos
ShowCursor
GetAsyncKeyState
ClientToScreen
GetActiveWindow
GetFocus
MapWindowPoints
SetPropA
RemovePropA
GetPropA
CallWindowProcA
DefWindowProcA
ReleaseCapture
SetCapture
IntersectRect
GetDesktopWindow
TranslateMessage
DispatchMessageA
UpdateWindow
WinHelpA
SetForegroundWindow
EnumThreadWindows
IsWindow
GetTopWindow
GetClassNameA
GetWindow
LoadIconA
LoadImageA
RegisterClassExA
RegisterClassA
OffsetRect
GetSystemMetrics
AdjustWindowRectEx
CopyRect
DestroyIcon
GetSubMenu
CreateIconIndirect
PostQuitMessage
GetUpdateRect
FillRect
SendMessageA
RedrawWindow
GetClientRect
IsIconic
EnableMenuItem
GetParent
GetDC
ScreenToClient
ReleaseDC
BeginPaint
EndPaint
SendDlgItemMessageA
SetWindowLongA
GetWindowLongA

gdi32

LineTo
SelectObject
MoveToEx
Rectangle
CreateHatchBrush
CreatePen
SelectPalette
RealizePalette
CreateSolidBrush
GetStockObject
SetDIBits
CreateCompatibleBitmap
CreateBitmap
CreatePalette
CreateFontIndirectA
GetObjectA
GetTextExtentPointA
GetCharWidthA
GetTextMetricsA
SetROP2
SetBkColor
SetTextColor
GetNearestPaletteIndex
SetBkMode
SetTextAlign
DPtoLP
TextOutA
Polygon
SetPolyFillMode
SelectClipRgn
CreateRectRgn
LPtoDP
DeleteObject

advapi32

RegQueryValueA
RegOpenKeyA
RegCloseKey

shell32

ShellExecuteA
DragAcceptFiles
DragQueryFileA

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TEXT_1
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60295ba7e92b024ab63f2e367b68363f

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comctl32

msacm32

Exports

Exports

Sections

.text Size: 227KB - Virtual size: 226KB

INIT_TEX Size: 2KB - Virtual size: 1KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 25KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 12KB

ef893fe6ebdc4dbc60cc375e89b7a953

Headers

File Characteristics

Imports

cncs232

winmm

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 196KB - Virtual size: 196KB

TEXT_1 Size: 49KB - Virtual size: 49KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 16KB - Virtual size: 26KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 18KB - Virtual size: 17KB

.text
Size: 227KB - Virtual size: 226KB

INIT_TEX
Size: 2KB - Virtual size: 1KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 25KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 12KB

.text
Size: 196KB - Virtual size: 196KB

TEXT_1
Size: 49KB - Virtual size: 49KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 16KB - Virtual size: 26KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 18KB - Virtual size: 17KB