Spider-man[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Spider-man.zip
Size

425.7MB
MD5

5257545cd62be718890385688bd26ff1
SHA1

45394679585930a0ebf4079e0b28057445aa5340
SHA256

8d976fe65896638fa541404747e77f8988c7c33c8bfb330336f270d60333b459
SHA512

be3a8b3ea46bf008105cec07481225c0d7aef80639ab37572f809b678ef5b6812c7dc84b4390b2fcbbd0dc9333ca66b698aec0a1407031128c737e9a4922f7a9
SSDEEP

12582912:Lt49R8uVJ4XTjRsoRuXGTqrzHHiHHd51jza7oQQ4pWS:p+RbJ4XTjOoI1rziHHPBzlQQ4gS

Score

7^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 3 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/Spider-man/D3D8.dll	acprotect
static1/unpack001/Spider-man/D3DImm.dll	acprotect
static1/unpack001/Spider-man/DDraw.dll	acprotect

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Spider-man/D3D8.dll
unpack001/Spider-man/D3DImm.dll
unpack001/Spider-man/DDraw.dll
unpack001/Spider-man/Getinfo.dll
unpack001/Spider-man/SpideyPC.exe
unpack001/Spider-man/Sysinv.dll
unpack001/Spider-man/binkw32.dll
unpack001/Spider-man/dgVoodooCpl.exe
unpack001/Spider-man/unins000.exe

Files

Spider-man.zip
.zip

Password: 1645
Spider-man/D3D8.dll
.dll windows:6 windows x86 arch:x86

Password: 1645

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 362KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Spider-man/D3DImm.dll
.dll windows:6 windows x86 arch:x86

Password: 1645

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetD3DInterface
GetD3DVersion

Sections

Size: - Virtual size: 948KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 193KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Spider-man/DDraw.dll
.dll windows:6 windows x86 arch:x86

Password: 1645

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AcquireDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalLock
DDInternalUnlock
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
ReleaseDDThreadLock

Sections

Size: - Virtual size: 676KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 205KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Spider-man/Docs/Help Art/ATVI.jpg
.jpg

Password: 1645
Spider-man/Docs/Help Art/MilesLogo.jpg
.jpg

Password: 1645
Spider-man/Docs/Help Art/binksmal[1].gif
Spider-man/Docs/Help Art/engine_turtle.jpg
.jpg

Password: 1645
Spider-man/Docs/Help Art/intel_logo[1].jpg
.jpg

Password: 1645
Spider-man/Docs/Help Art/logo.jpg
.jpg

Password: 1645
Spider-man/Docs/Help Art/marvel.gif
Spider-man/Docs/Help Art/softilogo[1].jpg
.jpg
Spider-man/Docs/Help/AMD_K6.htm
.html
Spider-man/Docs/Help/Audio_Problems.htm
.html
Spider-man/Docs/Help/AutoPlay.htm
.html
Spider-man/Docs/Help/Before_The_Installation.htm
.html
Spider-man/Docs/Help/CD_Not_Detected.htm
.html
Spider-man/Docs/Help/CD_ROM_Changer_Problems.htm
.html
Spider-man/Docs/Help/CD_ROM_Problems.htm
.html
Spider-man/Docs/Help/Can_I_run_the_game_without_the_CD_in_the_drive.htm
.html
Spider-man/Docs/Help/Color_Settings.htm
.html
Spider-man/Docs/Help/Ctrl_Alt_Del_Locks_Up_My_System.htm
.html
Spider-man/Docs/Help/Customer_support.htm
.html
Spider-man/Docs/Help/Cyrix_Processors.htm
.html
Spider-man/Docs/Help/DirectX.htm
.html
Spider-man/Docs/Help/Disabling_Virus_Checker.htm
.html
Spider-man/Docs/Help/Display_Options_Box_Looks_Funny.htm
.html
Spider-man/Docs/Help/Display_Settings.htm
.html
Spider-man/Docs/Help/Electronic_Registration.htm
.html
Spider-man/Docs/Help/Game_sometimes_quit_to_the_desktop.htm
.html
Spider-man/Docs/Help/Gamma_adjustment.htm
.html
Spider-man/Docs/Help/Improving_Performance.htm
.html
Spider-man/Docs/Help/Installation_Problems.htm
.html
Spider-man/Docs/Help/Installing_a_new_sound_card.htm
.html
Spider-man/Docs/Help/Installing_a_new_video_card.htm
.html
Spider-man/Docs/Help/Installing_the_game.htm
.html
Spider-man/Docs/Help/Installing_the_game_to_a_compressed_hard_drive.htm
.html
Spider-man/Docs/Help/Installing_uninstalling.htm
.html
Spider-man/Docs/Help/Kundendienst_in_Deutschland.htm
.html
Spider-man/Docs/Help/Minimum_System_Requirements.htm
.html
Spider-man/Docs/Help/Mouse_problems.htm
.html
Spider-man/Docs/Help/Multiple_CD_ROM_Drives.htm
.html
Spider-man/Docs/Help/Next_Gen.htm
.html
Spider-man/Docs/Help/Power_Saver_Functions.htm
.html
Spider-man/Docs/Help/Reference_Drivers.htm
.html
Spider-man/Docs/Help/Resolution_Information.htm
.html
Spider-man/Docs/Help/Saved_Games.htm
.html
Spider-man/Docs/Help/Screen_goes_black_and_freezes_when_I_launch_the_game.htm
.html
Spider-man/Docs/Help/Screen_savers_and_game_performance.htm
.html
Spider-man/Docs/Help/Slow_Performance.htm
.html
Spider-man/Docs/Help/Sorting_problems.htm
.html
Spider-man/Docs/Help/Sound_card_conflicts.htm
.html
Spider-man/Docs/Help/Sound_problems_in_the_game.htm
.html
Spider-man/Docs/Help/Sounds_are_distorted_and_or_the_movies_are_choppy.htm
.html
Spider-man/Docs/Help/Start_the_Game.htm
.html
Spider-man/Docs/Help/Supported_Operating_Systems.htm
.html
Spider-man/Docs/Help/Taskbar_hides_a_portion_of_the_game_window.htm
.html
Spider-man/Docs/Help/The_window_disappeared_and_the_screen_went_blank.htm
.html
Spider-man/Docs/Help/Troubleshooting.htm
.html
Spider-man/Docs/Help/Uninstalling_the_game.htm
.html
Spider-man/Docs/Help/Updates_and_patches.htm
.html
Spider-man/Docs/Help/Video_card_problems.htm
.html
Spider-man/Docs/Help/Video_card_reference_drivers.htm
.html
Spider-man/Docs/Help/alt_tab.htm
.html
Spider-man/Docs/Help/fphover.class
Spider-man/Docs/Help/fphoverx.class
Spider-man/Docs/Help/readme.htm
.html
Spider-man/Docs/INDEX.HTM
.html
Spider-man/Docs/License.txt
Spider-man/Docs/Manuals/Credits.txt
Spider-man/Docs/SpiderMan.pdf
.pdf
Spider-man/Docs/Vendor/3Dfx.htm
.html
Spider-man/Docs/Vendor/AST_Computers.htm
.html
Spider-man/Docs/Vendor/ATI_Technologies_Inc_.htm
.html
Spider-man/Docs/Vendor/Acer_America.htm
.html
Spider-man/Docs/Vendor/Advanced_Gravis.htm
.html
Spider-man/Docs/Vendor/Advanced_Integration_Research.htm
.html
Spider-man/Docs/Vendor/Asus.htm
.html
Spider-man/Docs/Vendor/Aztech_Labs.htm
.html
Spider-man/Docs/Vendor/Boca_Research_Inc_.htm
.html
Spider-man/Docs/Vendor/CD_ROM_Drive_Manufacturers_List.htm
.html
Spider-man/Docs/Vendor/CSS_Laboratories__Inc_.htm
.html
Spider-man/Docs/Vendor/Canopus_Corporation.htm
.html
Spider-man/Docs/Vendor/Cardinal_Technologies.htm
.html
Spider-man/Docs/Vendor/Cirrus_Logic.htm
.html
Spider-man/Docs/Vendor/Colorgraphic_Communication.htm
.html
Spider-man/Docs/Vendor/Compaq_Computer_Corporation.htm
.html
Spider-man/Docs/Vendor/Creative_Labs.htm
.html
Spider-man/Docs/Vendor/Dell_Computers.htm
.html
Spider-man/Docs/Vendor/Diamond_Multimedia_Systems.htm
.html
Spider-man/Docs/Vendor/Epson_America.htm
.html
Spider-man/Docs/Vendor/Gateway_2000.htm
.html
Spider-man/Docs/Vendor/Hercules_Computer_Technology_Inc_.htm
.html
Spider-man/Docs/Vendor/Hitachi.htm
.html
Spider-man/Docs/Vendor/IBM__International_Business_Machines_.htm
.html
Spider-man/Docs/Vendor/Intel_Corp_.htm
.html
Spider-man/Docs/Vendor/Jazz_Multimedia.htm
.html
Spider-man/Docs/Vendor/Logitech.htm
.html
Spider-man/Docs/Vendor/Matrox_Graphics_Inc_.htm
.html
Spider-man/Docs/Vendor/Media_Vision.htm
.html
Spider-man/Docs/Vendor/Microsoft.htm
.html
Spider-man/Docs/Vendor/Mitsubishi.htm
.html
Spider-man/Docs/Vendor/Mitsumi.htm
.html
Spider-man/Docs/Vendor/NEC.htm
.html
Spider-man/Docs/Vendor/Number_Nine_Visual_Technology.htm
.html
Spider-man/Docs/Vendor/Oak_Technology.htm
.html
Spider-man/Docs/Vendor/Orchid_Technology.htm
.html
Spider-man/Docs/Vendor/Packard_Bell.htm
.html
Spider-man/Docs/Vendor/Panasonic_Interactive_Media.htm
.html
Spider-man/Docs/Vendor/Paradise__Phillips_Electronics.htm
.html
Spider-man/Docs/Vendor/Real_Magic.htm
.html
Spider-man/Docs/Vendor/Rendition.htm
.html
Spider-man/Docs/Vendor/S3.htm
.html
Spider-man/Docs/Vendor/STB_Systems__Inc_.htm
.html
Spider-man/Docs/Vendor/Sigma_Designs.htm
.html
Spider-man/Docs/Vendor/Sony.htm
.html
Spider-man/Docs/Vendor/Sound_Card_Manufacturers_List.htm
.html
Spider-man/Docs/Vendor/Swan_Technologies__Inc_.htm
.html
Spider-man/Docs/Vendor/System_Manufacturers_List.htm
.html
Spider-man/Docs/Vendor/Tandy_Computer.htm
.html
Spider-man/Docs/Vendor/Teac.htm
.html
Spider-man/Docs/Vendor/Toshiba.htm
.html
Spider-man/Docs/Vendor/Trident_Microsystems_Inc_.htm
.html
Spider-man/Docs/Vendor/Tseng_Labs.htm
.html
Spider-man/Docs/Vendor/Turtle_Beach.htm
.html
Spider-man/Docs/Vendor/VENDOR.HTM
.html
Spider-man/Docs/Vendor/Video_Card_Manufacturers_List.htm
.html
Spider-man/Docs/Vendor/Willow_Peripherals.htm
.html
Spider-man/Docs/Vendor/nVidia.htm
.html
Spider-man/Docs/fphover.class
Spider-man/Docs/fphoverx.class
Spider-man/Docs/readme.txt
Spider-man/Getinfo.dll
.dll windows:4 windows x86 arch:x86

09458bfe41468999d5ce5dcb174e0e52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
DisableThreadLibraryCalls
VirtualAlloc
GetSystemDefaultLCID
GetVolumeInformationA
GlobalMemoryStatus
GetTickCount
VirtualFree
GetVersionExA

user32

GetDesktopWindow
GetSystemMetrics
GetDC
ReleaseDC
wsprintfA

gdi32

GetDeviceCaps

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA

winmm

joyGetNumDevs
joyGetPos
waveOutGetNumDevs
waveOutGetDevCapsA

msvcrt

strstr
tolower
malloc
_stricmp
_strupr
_strlwr
_strnicmp
_strcmpi
strncmp
sprintf
isdigit
fclose
??3@YAXPAX@Z
fread
??2@YAPAXI@Z
ftell
fseek
fopen
atof
strchr
atoi
_ftol
toupper
isprint
_except_handler3
_itoa
free
_initterm
_adjust_fdiv

Exports

Exports

CheckCDRomSpeed
DirectXInstalled
FindATI
FindJoystick
FindMonster3D
FindMystique
FindOrchid
FindPowerVR
FindRendition
FindS3ViRGE
FindSTB
FindVideoMemory
Get3DHardware
GetCDROM
GetCDROMLetter
GetChipVendor
GetColorDepth
GetDDVRAM
GetDisplay
GetLanguageCharacter
GetMemory
GetModem
GetMonitor
GetMouse
GetNetwork
GetOS
GetPrimaryDisplayDesc
GetProcessor
GetProcessorSpeed
GetScreenResolution
GetSoundCard
GetSoundCardCaps
GetVolumeNumber
Has16BitSoundCard
HasStereoSoundCard
IsAfrikaans
IsAlbanian
IsArabic
IsBasque
IsBelarusian
IsBulgarian
IsCatalan
IsChinese
IsCroatian
IsCzech
IsDanish
IsDutch
IsEnglish
IsEnglishCanadian
IsEnglishUK
IsEnglishUS
IsEstonian
IsFaeroese
IsFarsi
IsFinnish
IsFrench
IsGerman
IsGreek
IsHebrew
IsHungarian
IsIcelandic
IsIndonesian
IsItalian
IsJapanese
IsKorean
IsLatvian
IsLithuanian
IsMMX
IsNeutral
IsNorwegian
IsOSR2
IsPolish
IsPortuguese
IsRomanian
IsRussian
IsSerbian
IsSlovak
IsSlovenian
IsSpanish
IsSwedish
IsThai
IsTurkish
IsVietnamese
ValidLanguage

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Spider-man/SpideyPC.exe
.exe windows:4 windows x86 arch:x86

b507f1272eec37c41dd2c0ca2f548cf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SetFilePointer
GetDriveTypeA
GetTickCount
CloseHandle
CreateFileA
ReadFile
GetCurrentDirectoryA
CreateDirectoryA
GetLastError
GetFileSize
GetModuleFileNameA
InterlockedIncrement
ResumeThread
GetOEMCP
GetACP
GetFileType
GetStdHandle
SetHandleCount
WriteFile
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
HeapSize
HeapReAlloc
GetProcAddress
RaiseException
SetEndOfFile
LoadLibraryA
SetStdHandle
ExitProcess
RtlUnwind
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetLastError
TlsGetValue
GetCPInfo
FlushFileBuffers
UnhandledExceptionFilter
TlsAlloc
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
InterlockedDecrement
GetStartupInfoA
GetModuleHandleA
CreateThread
TlsSetValue
ExitThread
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersion
EnterCriticalSection

user32

UpdateWindow
SetCursor
MessageBoxA
ClientToScreen
MoveWindow
AdjustWindowRectEx
GetWindowLongA
MessageBeep
PostMessageA
DefWindowProcA
DestroyWindow
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
ShowCursor
FindWindowA
SendMessageA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
ShowWindow
SetFocus

gdi32

GetStockObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

dinput8

DirectInput8Create

winmm

mmioAscend
mmioRead
mmioClose
mmioStringToFOURCCA
mmioOpenA
mmioDescend
timeBeginPeriod
timeSetEvent
timeKillEvent
mciSendCommandA
timeGetDevCaps

dsound

ord11

binkw32

_BinkSetVolume@8
_BinkSetIOSize@4
_BinkGetSummary@8
_BinkClose@4
_BinkSetPan@8
_BinkDDSurfaceType@4
_BinkDoFrame@4
_BinkNextFrame@4
_BinkCopyToBuffer@28
_BinkPause@8
_BinkWait@4
_BinkService@4
_BinkOpenDirectSound@4
_BinkSetSoundSystem@8
_BinkSetVideoOnOff@8
_BinkOpen@8

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 40.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Spider-man/Sysinv.dll
.dll windows:4 windows x86 arch:x86

c1d32cb84da7185f602248f17509fe57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
SetFilePointer
GetLastError
WriteFile
GetTempPathA
GetWindowsDirectoryA
ReadFile
VirtualAlloc
GetDiskFreeSpaceA
GetModuleHandleA
GetSystemDirectoryA
GetPrivateProfileStringA
GetModuleFileNameA
WinExec
GetDriveTypeA
GetTickCount
GetProcAddress
GetVersionExA
LoadLibraryA
VirtualFree
FreeLibrary
GetFileAttributesA
CreateFileA
CloseHandle
LCMapStringW
TerminateProcess
GetACP
GetLocaleInfoW
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetStdHandle
SetHandleCount
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetStringTypeA
GetStringTypeW
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate

user32

SendDlgItemMessageA
wsprintfA
DialogBoxParamA
SetDlgItemTextA
SendMessageA
MessageBoxA
EndDialog

gdi32

SetBkMode
GetStockObject

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

getinfo

GetPrimaryDisplayDesc
GetMouse
GetNetwork
GetModem
GetMonitor
GetColorDepth
GetCDROM
GetMemory
GetProcessorSpeed
GetScreenResolution
FindVideoMemory
GetOS
GetSoundCard
GetProcessor

Exports

Exports

DLLEntryPoint
SystemInventory

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Spider-man/_How To Play!!.txt
Spider-man/binkw32.dll
.dll windows:4 windows x86 arch:x86

9ef24320220f1db7d8dfb472c07e734b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
ClientToScreen
GetCursorPos
ReleaseDC
GetDC
GetSystemMetrics
EndPaint
BeginPaint
DefWindowProcA
UnregisterClassA
DestroyWindow
SetCursor
ShowCursor
ScreenToClient
PeekMessageA
CreateWindowExA
GetTopWindow
GetWindow
GetWindowLongA
GetWindowThreadProcessId
GetActiveWindow
GetClassLongA
ChangeDisplaySettingsA
GetWindowRect
GetClientRect
IsWindowVisible
RegisterClassA

gdi32

GetDIBits
SetStretchBltMode
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
DeleteObject
CreateDIBSection
DeleteDC
SelectObject
GetPixel
SetPixel

kernel32

CreateFileA
WaitForMultipleObjects
ReleaseMutex
ReadFile
CloseHandle
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualFree
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
GetCurrentProcessId
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetEvent
SetFilePointer
LCMapStringW
LCMapStringA
CreateEventA
CreateMutexA
CreateThread
GetStringTypeW
GetStringTypeA
WaitForSingleObject
ResumeThread
GetOEMCP
HeapReAlloc
GetACP
GetCPInfo
HeapAlloc

winmm

waveOutUnprepareHeader
timeGetTime
waveOutPause
waveOutRestart
waveOutReset
waveOutClose
waveOutSetVolume
waveOutWrite
waveOutOpen
waveOutPrepareHeader

Exports

Exports

_BinkBufferBlit@12
_BinkBufferCheckWinPos@12
_BinkBufferClear@8
_BinkBufferClose@4
_BinkBufferGetDescription@4
_BinkBufferGetError@0
_BinkBufferLock@4
_BinkBufferOpen@16
_BinkBufferSetDirectDraw@8
_BinkBufferSetHWND@8
_BinkBufferSetOffset@12
_BinkBufferSetResolution@12
_BinkBufferSetScale@12
_BinkBufferUnlock@4
_BinkCheckCursor@20
_BinkClose@4
_BinkCloseTrack@4
_BinkCopyToBuffer@28
_BinkDDSurfaceType@4
_BinkDX8SurfaceType@4
_BinkDoFrame@4
_BinkGetError@0
_BinkGetKeyFrame@12
_BinkGetRealtime@12
_BinkGetRects@8
_BinkGetSummary@8
_BinkGetTrackData@8
_BinkGetTrackID@8
_BinkGetTrackMaxSize@8
_BinkGetTrackType@8
_BinkGoto@12
_BinkIsSoftwareCursor@8
_BinkLogoAddress@0
_BinkNextFrame@4
_BinkOpen@8
_BinkOpenDirectSound@4
_BinkOpenMiles@4
_BinkOpenTrack@8
_BinkOpenWaveOut@4
_BinkPause@8
_BinkRestoreCursor@4
_BinkService@4
_BinkSetError@4
_BinkSetFrameRate@8
_BinkSetIO@4
_BinkSetIOSize@4
_BinkSetPan@8
_BinkSetSimulate@4
_BinkSetSoundOnOff@8
_BinkSetSoundSystem@8
_BinkSetSoundTrack@4
_BinkSetVideoOnOff@8
_BinkSetVolume@8
_BinkWait@4
_RADTimerRead@0
_YUV_blit_16a1bpp@52
_YUV_blit_16a1bpp_mask@52
_YUV_blit_16a4bpp@52
_YUV_blit_16a4bpp_mask@52
_YUV_blit_16bpp@48
_YUV_blit_16bpp_mask@48
_YUV_blit_24bpp@48
_YUV_blit_24bpp_mask@48
_YUV_blit_24rbpp@48
_YUV_blit_24rbpp_mask@48
_YUV_blit_32abpp@52
_YUV_blit_32abpp_mask@52
_YUV_blit_32bpp@48
_YUV_blit_32bpp_mask@48
_YUV_blit_32rabpp@52
_YUV_blit_32rabpp_mask@52
_YUV_blit_32rbpp@48
_YUV_blit_32rbpp_mask@48
_YUV_blit_UYVY@48
_YUV_blit_UYVY_mask@48
_YUV_blit_YUY2@48
_YUV_blit_YUY2_mask@48
_YUV_blit_YV12@52
_YUV_init@4
_radfree@4
_radmalloc@4

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Spider-man/data.pkr
Spider-man/dgVoodoo.conf
Spider-man/dgVoodooCpl.exe
.exe windows:6 windows x86 arch:x86

d0542437be38d037655fd1cb29c9bd22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Dev\Stuffs\Bin\Win32\Release\dgVoodooCpl.pdb

Imports

gdi32

GetStockObject
DeleteDC
CreateCompatibleDC
SelectObject
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps

kernel32

GetModuleHandleW
CreateDirectoryW
SetLastError
GetModuleFileNameW
GetLastError
GetCurrentProcessId
FindResourceW
SizeofResource
LoadResource
LockResource
ExitProcess
CreateFileW
CreateFileA
CloseHandle
SetFilePointer
ReadFile
WriteFile
GetFileSizeEx
LoadLibraryW
GetProcAddress
FreeLibrary
LoadLibraryA
MulDiv
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap

user32

GetDlgItem
GetWindowTextW
MessageBoxA
FindWindowExW
CharUpperW
LoadStringW
EnableWindow
DialogBoxParamW
GetParent
GetClassInfoExW
GetSysColorBrush
DrawTextW
AppendMenuW
GetClientRect
TrackPopupMenuEx
SetWindowLongW
EndDeferWindowPos
SetParent
SendMessageA
DestroyMenu
DialogBoxIndirectParamW
SetWindowTextA
MapWindowPoints
SetMenuItemInfoW
GetDlgCtrlID
CharLowerA
OffsetRect
BeginDeferWindowPos
ShowWindow
GetScrollPos
RegisterClassExW
GetScrollInfo
GetClassNameA
CreatePopupMenu
GetSystemMetrics
EndDialog
CreateWindowExW
SetWindowPos
DestroyWindow
GetWindowRect
CallWindowProcW
DeferWindowPos
CreateDialogParamW
SetScrollInfo
GetWindowLongW
ReleaseDC
InvalidateRect
MonitorFromRect
GetDC
GetWindow
wvsprintfA
LoadImageW
FillRect
SendMessageW
CreateDialogIndirectParamW

shlwapi

PathRemoveFileSpecW
PathAppendW

ole32

CoTaskMemFree
CoCreateInstance

shell32

SHGetFolderPathW

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Spider-man/media.pkr
Spider-man/texture.dat
Spider-man/unins000.dat
Spider-man/unins000.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1645

Password: 1645

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: - Virtual size: 1.2MB

Size: 362KB - Virtual size: 364KB

.rsrc Size: 12KB - Virtual size: 16KB

Password: 1645

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: - Virtual size: 948KB

Size: 193KB - Virtual size: 196KB

.rsrc Size: 5KB - Virtual size: 8KB

Password: 1645

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: - Virtual size: 676KB

Size: 205KB - Virtual size: 208KB

.rsrc Size: 12KB - Virtual size: 16KB

Password: 1645

Password: 1645

Password: 1645

Password: 1645

Password: 1645

09458bfe41468999d5ce5dcb174e0e52

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winmm

msvcrt

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 1KB - Virtual size: 1KB

b507f1272eec37c41dd2c0ca2f548cf7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ddraw

dinput8

winmm

dsound

binkw32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 164KB - Virtual size: 40.8MB

.rsrc Size: 4KB - Virtual size: 3KB

c1d32cb84da7185f602248f17509fe57

Headers

File Characteristics

.rsrc
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 16KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 164KB - Virtual size: 40.8MB

.rsrc
Size: 4KB - Virtual size: 3KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 18KB - Virtual size: 24KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 205KB - Virtual size: 204KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 29KB - Virtual size: 85KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 21KB - Virtual size: 21KB

.text
Size: 98KB - Virtual size: 97KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 1024B - Virtual size: 10KB

.rsrc
Size: 253KB - Virtual size: 252KB

.reloc
Size: 4KB - Virtual size: 3KB

CODE
Size: 601KB - Virtual size: 601KB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 5KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 34KB

.rsrc
Size: 71KB - Virtual size: 71KB