RoleViewCreate
Static task
static1
Behavioral task
behavioral1
Sample
8eae76589615efed282c08223220f170N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8eae76589615efed282c08223220f170N.dll
Resource
win10v2004-20240709-en
General
-
Target
8eae76589615efed282c08223220f170N.exe
-
Size
116KB
-
MD5
8eae76589615efed282c08223220f170
-
SHA1
d291988b3a76489c21e6858e352f3f9ef8e2f9d0
-
SHA256
d7cff0b631279c81e1470875a246dc34ca7572d4995a55b4127ca47c35433b22
-
SHA512
eadbbf0701ce99718c91264efd85c29039e778dcb32f96086bcebd429c1ad95422e6af6bae42dbbd4f9d85fda59054dc2277e7fb2ef3b6be5a84e1108c133ead
-
SSDEEP
3072:eGN5FHUCvZfjrVWWNroD02QeewQeeTQeesQeeS3QeefQee55WVHro7Y2:eyHUWNPt2QeewQeeTQeesQeeS3QeefQb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eae76589615efed282c08223220f170N.exe
Files
-
8eae76589615efed282c08223220f170N.exe.dll windows:4 windows x86 arch:x86
2541e934469e29492d3b8b74d407144c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
timeGetTime
graphic
?Common_Scale@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?PrepareModle@CMyBitmap@@SAXXZ
?Common_Translate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?ScrRayBuild@CMyBitmap@@SAXHHAAUD3DXVECTOR3@@0@Z
?GameCameraIsProject@CMyBitmap@@SAHXZ
?GetObliqueAngle@CMyBitmap@@SAHXZ
?Common_Rotate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
graphicdata
GameDataSetQuery
ndsound
_DXPlaySound@24
role3d
I3DRoleCreate
Simple3DObjCreate
gamedata
RoleDataQuery
msvcrt
fclose
sscanf
strrchr
fscanf
fopen
localtime
time
fprintf
_mkdir
vsprintf
strcat
rand
srand
_stricmp
_except_handler3
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
free
_finite
_CIacos
sprintf
strcmp
_ftol
memset
??2@YAPAXI@Z
strncpy
__CxxFrameHandler
ctime
kernel32
OutputDebugStringA
GetVersionExA
IsProcessorFeaturePresent
MulDiv
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ