SFRushCracks[.]rar

Resubmissions

07/07/2024, 05:03

240707-fp3s2awhmg 7

07/07/2024, 04:17

240707-ewj4tstcrl 7

Sharing

Copy URL Twitter E-mail

General

Target

SFRushCracks.rar
Size

1.7MB
MD5

bd6091e4aec4582ddf6da7a665fdc383
SHA1

775865ce35d62621a3a6a3ff51041f05e09e22cd
SHA256

16c8d282ed40d25b26773ec943c69fdd5e963d157a63e703be1da7c15867c2ae
SHA512

dc691a2aab7e3e8e8e056a1b449b8b06a915ae20def8bb4e953167de99132fd8e03c78589c3b81f764e4aef020a7b4bd142420b2e625d2fd7023c23689944be6
SSDEEP

24576:/c+XYHsx6l/9AOckfAUf8HI166mkc3fGzavF7x6l/HnOckfr8HI166mnT:k+oICqOxMHg6ZP4wFCHnOxgHg6ZnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1/Rush1024.exe
unpack001/1/Rush1280.exe
unpack001/1/Rush640.exe
unpack001/1/Rush800.exe
unpack001/2/Rush1024.exe
unpack001/2/Rush1280.exe
unpack001/2/Rush640.exe
unpack001/2/Rush800.exe

Files

SFRushCracks.rar
.rar
1/Rush1024.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1/Rush1280.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1/Rush640.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1/Rush800.exe
.exe windows:4 windows x86 arch:x86

d8667c553b7bba57622f4738f4e2866e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_guEndianSwapBytes@4
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grFogTable@4
_grFogMode@4
_grTexCombineFunction@8
_grSstStatus@0
_grDepthBiasLevel@4
_grDepthBufferMode@4
_guColorCombineFunction@4
_grDrawLine@8
_guAlphaSource@4
_grDepthMask@4
_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grSstWinOpen@28
_grLfbReadRegion@28
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grColorCombine@20
_grAlphaCombine@20
_grTexCombine@28
_grAlphaBlendFunction@16
_grAlphaTestFunction@4
_grTexFilterMode@12
_grTexMipMapMode@12
_grDepthBufferFunction@4
_grAlphaTestReferenceValue@4
_grSstOrigin@4
_grCullMode@4
_grTexDownloadMipMap@16
_grTexSource@16
_grClipWindow@16
_grGlideSetState@4
_grGlideShutdown@0
_guFogTableIndexToW@4
_grTexClampMode@12
_grTexMinAddress@4
_grTexMaxAddress@4
_grTexCalcMemRequired@16
_grFogColorValue@4
_grSstIdle@0
_grBufferSwap@4
_grLfbWriteRegion@32
_guTexMemReset@0
_grBufferClear@12
_grDrawTriangle@12
_grBufferNumPending@0

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

GetThreadPriority
EnterCriticalSection
QueryPerformanceFrequency
SetThreadPriority
FreeLibrary
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
TlsGetValue
SetLastError
TlsAlloc
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
SetEnvironmentVariableW
TlsSetValue
ExitThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
CreateThread
CreateEventA
GetCurrentThread
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetSystemTime
GetTimeZoneInformation
Sleep
GetModuleHandleA
CloseHandle
ResumeThread
GetLastError
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
CreateFileA
DeviceIoControl
GetProcessAffinityMask
GetVersionExA
GetSystemInfo
OutputDebugStringA
GetTickCount
GetCurrentProcess
QueryPerformanceCounter

user32

LoadCursorA
PostMessageA
GetWindowRect
DefWindowProcA
ReleaseDC
GetSystemMetrics
RegisterClassA
LoadIconA
CreateWindowExA
GetDC
GetClientRect
SetCursor
SendMessageA
wsprintfA
MessageBoxA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2/Rush1024.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2/Rush1280.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2/Rush640.exe
.exe windows:4 windows x86 arch:x86

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grAlphaTestReferenceValue@4
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grSstOrigin@4
_grCullMode@4
_grClipWindow@16
_grGlideSetState@4
_grTexMaxAddress@4
_grFogColorValue@4
_grFogTable@4
_grGlideShutdown@0
_grBufferNumPending@0
_guTexMemReset@0
_grLfbWriteRegion@32
_grSstIdle@0
_guFogTableIndexToW@4
_guEndianSwapBytes@4
_grTexCalcMemRequired@16
_grTexDownloadMipMap@16
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grTexClampMode@12
_grTexFilterMode@12
_grTexMipMapMode@12
_grTexSource@16
_grTexCombine@28
_grTexMinAddress@4
_grTexCombineFunction@8
_grSstStatus@0
_grColorCombine@20
_grDepthBiasLevel@4
_grFogMode@4
_grAlphaCombine@20
_grAlphaBlendFunction@16
_grSstWinOpen@28
_grLfbReadRegion@28
_grDepthBufferMode@4
_grBufferClear@12
_grAlphaTestFunction@4
_grBufferSwap@4
_grDepthMask@4
_grDepthBufferFunction@4
_guAlphaSource@4
_grDrawLine@8
_guColorCombineFunction@4
_grDrawTriangle@12

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcess
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableW
ResumeThread
CreateThread
QueryPerformanceCounter
GetModuleHandleA
QueryPerformanceFrequency
GetProcessAffinityMask
GetLastError
FreeLibrary
GetTickCount
SetLastError
TlsAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsSetValue
LoadLibraryA
GetThreadPriority
CloseHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
CreateFileA
DeviceIoControl
SetThreadPriority
GetVersionExA
GetCurrentThread
OutputDebugStringA
Sleep
CreateEventA
DeleteCriticalSection

user32

PostMessageA
GetClientRect
DefWindowProcA
ReleaseDC
GetDC
RegisterClassA
LoadIconA
wsprintfA
GetSystemMetrics
CreateWindowExA
GetWindowRect
LoadCursorA
SetCursor
MessageBoxA
SendMessageA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2/Rush800.exe
.exe windows:4 windows x86 arch:x86

d8667c553b7bba57622f4738f4e2866e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iforce2

_IFLoadProjectFile@8
_IFReleaseProject@4
_IFCreateEffects@12

glide2x

_guEndianSwapBytes@4
_grTexDownloadTable@12
_grTexNCCTable@8
_grChromakeyMode@4
_grChromakeyValue@4
_grFogTable@4
_grFogMode@4
_grTexCombineFunction@8
_grSstStatus@0
_grDepthBiasLevel@4
_grDepthBufferMode@4
_guColorCombineFunction@4
_grDrawLine@8
_guAlphaSource@4
_grDepthMask@4
_grSstSelect@4
_grSstQueryBoards@4
_grGlideInit@0
_grGlideGetVersion@4
_grSstQueryHardware@4
_grSstWinOpen@28
_grLfbReadRegion@28
_grConstantColorValue@4
_gu3dfGetInfo@8
_gu3dfLoad@8
_grGlideGetState@4
_grColorCombine@20
_grAlphaCombine@20
_grTexCombine@28
_grAlphaBlendFunction@16
_grAlphaTestFunction@4
_grTexFilterMode@12
_grTexMipMapMode@12
_grDepthBufferFunction@4
_grAlphaTestReferenceValue@4
_grSstOrigin@4
_grCullMode@4
_grTexDownloadMipMap@16
_grTexSource@16
_grClipWindow@16
_grGlideSetState@4
_grGlideShutdown@0
_guFogTableIndexToW@4
_grTexClampMode@12
_grTexMinAddress@4
_grTexMaxAddress@4
_grTexCalcMemRequired@16
_grFogColorValue@4
_grSstIdle@0
_grBufferSwap@4
_grLfbWriteRegion@32
_guTexMemReset@0
_grBufferClear@12
_grDrawTriangle@12
_grBufferNumPending@0

smackw32

_SmackUseMMX@4
_SmackOpen@12
_SmackWait@4
_SmackToBuffer@28
_SmackClose@4
_SmackGoto@8
_SmackDoFrame@4
_SmackToBufferRect@8
_SmackNextFrame@4

audiow32

ord144
ord109
ord106
ord118
ord145
ord119
ord110
ord100
ord108
ord107
ord127
ord125
ord126
ord120
ord132
ord123

dinput

DirectInputCreateA

winmm

joyGetPosEx
mciSendCommandA
mciGetErrorStringA

kernel32

GetThreadPriority
EnterCriticalSection
QueryPerformanceFrequency
SetThreadPriority
FreeLibrary
SetEndOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
RaiseException
RtlUnwind
UnhandledExceptionFilter
TlsGetValue
SetLastError
TlsAlloc
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
SetEnvironmentVariableW
TlsSetValue
ExitThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
CreateThread
CreateEventA
GetCurrentThread
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetSystemTime
GetTimeZoneInformation
Sleep
GetModuleHandleA
CloseHandle
ResumeThread
GetLastError
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
CreateFileA
DeviceIoControl
GetProcessAffinityMask
GetVersionExA
GetSystemInfo
OutputDebugStringA
GetTickCount
GetCurrentProcess
QueryPerformanceCounter

user32

LoadCursorA
PostMessageA
GetWindowRect
DefWindowProcA
ReleaseDC
GetSystemMetrics
RegisterClassA
LoadIconA
CreateWindowExA
GetDC
GetClientRect
SetCursor
SendMessageA
wsprintfA
MessageBoxA

gdi32

ExtEscape
GetStockObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
readme.txt

Resubmissions

Sharing

General

Malware Config

Signatures

Files

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

Imports

iforce2

glide2x

smackw32

audiow32

dinput

winmm

kernel32

user32

gdi32

advapi32

Sections

.text Size: 460KB - Virtual size: 457KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 80KB - Virtual size: 2.5MB

.rsrc Size: 8KB - Virtual size: 6KB

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

Imports

iforce2

glide2x

smackw32

audiow32

dinput

winmm

kernel32

user32

gdi32

advapi32

Sections

.text Size: 460KB - Virtual size: 457KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 80KB - Virtual size: 2.5MB

.rsrc Size: 8KB - Virtual size: 6KB

22f4d5821b31728790adf109a219fa9d

Headers

File Characteristics

Imports

iforce2

glide2x

smackw32

audiow32

dinput

winmm

kernel32

user32

gdi32

advapi32

Sections

.text Size: 460KB - Virtual size: 457KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 80KB - Virtual size: 2.5MB

.rsrc Size: 8KB - Virtual size: 6KB

d8667c553b7bba57622f4738f4e2866e

Headers

File Characteristics

Imports

iforce2

glide2x

smackw32

audiow32

dinput

winmm

kernel32

user32

gdi32

advapi32

Sections

.text Size: 460KB - Virtual size: 457KB

.rdata Size: 32KB - Virtual size: 29KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB

.text
Size: 460KB - Virtual size: 457KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 80KB - Virtual size: 2.5MB

.rsrc
Size: 8KB - Virtual size: 6KB