RJ071743_trial[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

RJ071743_trial.zip
Size

10.0MB
MD5

c5e7a0464d3f893deb5a894d113f456d
SHA1

d96ffca37f12277e24cc3258b8539572a718a468
SHA256

a0675a077c4a183c77409b1f319e2f918474a866ca7cafa746115dbe11edd18f
SHA512

a8d1d780dadce7daff3baba9bd68f9261296478ec15fb456206f1a404327c6f8a7ddc18d5e96b096cf79dd2747ff6717b08926075d37ab5defa1fec5f709d6d4
SSDEEP

196608:jb+QZGqnLI+aofty+okhpjsraHCvejygL6h8C+dDsLj2CjHRcqLikrDTJLqbnu4o:jb/9vokhp42iDgL6GCUsLj27qR354wrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/jqgCɏ̎qi̌Łj/MyGame.exe
unpack001/jqgCɏ̎qi̌Łj/live.dll

Files

RJ071743_trial.zip
.zip
jqgCɏ̎qi̌Łj/MyGame.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jqgCɏ̎qi̌Łj/live.dll
.dll windows:4 windows x86 arch:x86

feb071493cfa598594db784d79df5822

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

kernel32

FreeEnvironmentStringsA
IsBadCodePtr
GetEnvironmentStringsW
IsBadWritePtr
GetThreadPriority
ReleaseSemaphore
CreateSemaphoreA
MulDiv
SetUnhandledExceptionFilter
GetVersionExA
HeapDestroy
GetEnvironmentVariableA
CloseHandle
SetFilePointer
ReadFile
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateEventA
GetModuleHandleA
WaitForSingleObject
SetEvent
CreateThread
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ResumeThread
SetThreadPriority
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
WaitForMultipleObjects
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
GetLastError
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleFileNameA
DeviceIoControl
GetModuleHandleW
GetTickCount
HeapCreate
VirtualFree
VirtualAlloc
SetStdHandle
ExitProcess
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
WriteFile
IsBadReadPtr
GetLocalTime
GetCurrentProcessId
FlushFileBuffers
GetStringTypeW
GetSystemInfo
LocalAlloc
GlobalMemoryStatus
GetDiskFreeSpaceA
LocalFree
GetComputerNameA
QueryPerformanceCounter

user32

SetForegroundWindow
DefWindowProcA
GetWindowPlacement
RegisterClassA
CreateWindowExA
IsRectEmpty
DestroyWindow
UpdateWindow
ShowWindow
SetWindowPos
PostMessageA
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
DispatchMessageA

gdi32

CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC

advapi32

GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoFreeUnusedLibraries

Exports

Exports

liveFinal
liveInit
liveOggGetAutoRepeat
liveOggGetBuffPos
liveOggGetBuffSize
liveOggGetLen
liveOggGetPan
liveOggGetPosition
liveOggGetRepeatPos
liveOggGetVol
liveOggGetWritePos
liveOggIsEnd
liveOggIsPaused
liveOggIsPlaying
liveOggPause
liveOggPlay
liveOggSetAutoRepeat
liveOggSetPan
liveOggSetPosition
liveOggSetRepeatPos
liveOggSetVol
liveOggStrGetFormat
liveOggStrGetLen
liveOggStrGetPos
liveOggStrGetSize
liveOggStrRead
liveOggStrSetPos
liveOggStrmanAdd
liveOggStrmanDel
liveOggmanAdd
liveOggmanDel
liveOggmanGetCount
liveOggmanProcessEvent
liveOggmanRestore
liveOggmanSetUseThread
liveOggmanUpdate
liveScreenGetVideoMode
liveScreenGetVideoModeCount
liveScreenSetVideoMode
liveVersion
liveVideoGetAutoRepeat
liveVideoGetDC
liveVideoGetDIBInfo
liveVideoGetLen
liveVideoGetPan
liveVideoGetPosition
liveVideoGetSourceHeight
liveVideoGetSourceWidth
liveVideoGetVisible
liveVideoGetVol
liveVideoIsEnd
liveVideoIsPaused
liveVideoIsPlaying
liveVideoNeedPaint
liveVideoPause
liveVideoPlay
liveVideoReleaseDC
liveVideoResume
liveVideoSetAutoRepeat
liveVideoSetPan
liveVideoSetPosition
liveVideoSetRect
liveVideoSetVisible
liveVideoSetVol
liveVideoSuspend
liveVidmanAdd
liveVidmanDel
liveVidmanFreeDIB
liveVidmanGetDIB
liveVidmanPause
liveVidmanProcessEvent
liveVidmanRestart
liveVidmanResume
liveVidmanSuspend
liveWmpGetAutoRepeat
liveWmpGetBuffPos
liveWmpGetBuffSize
liveWmpGetLen
liveWmpGetPan
liveWmpGetPosition
liveWmpGetVol
liveWmpGetWritePos
liveWmpIsEnd
liveWmpIsPaused
liveWmpIsPlaying
liveWmpPause
liveWmpPlay
liveWmpSetAutoRepeat
liveWmpSetPan
liveWmpSetPosition
liveWmpSetVol
liveWmpmanAdd
liveWmpmanDel
liveWmpmanProcessEvent
liveWmpmanRestore

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jqgCɏ̎qi̌Łj/read me.txt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 1.6MB - Virtual size: 1.6MB

DATA Size: 36KB - Virtual size: 35KB

BSS Size: - Virtual size: 14KB

.idata Size: 11KB - Virtual size: 11KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 121KB - Virtual size: 121KB

.rsrc Size: 50KB - Virtual size: 50KB

feb071493cfa598594db784d79df5822

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

ole32

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 76KB - Virtual size: 85KB

.reloc Size: 16KB - Virtual size: 14KB

CODE
Size: 1.6MB - Virtual size: 1.6MB

DATA
Size: 36KB - Virtual size: 35KB

BSS
Size: - Virtual size: 14KB

.idata
Size: 11KB - Virtual size: 11KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 121KB - Virtual size: 121KB

.rsrc
Size: 50KB - Virtual size: 50KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 76KB - Virtual size: 85KB

.reloc
Size: 16KB - Virtual size: 14KB