(C62) [上海アリス幻樂団] 東方紅魔郷〜 The Embodiment of Scarlet Devil[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

(C62) [上海アリス幻樂団] 東方紅魔郷〜 The Embodiment of Scarlet Devil.rar
Size

283.8MB
MD5

e1027b26dffa1b6381c4591d1967906e
SHA1

f9d53bb4fb8e891d1c71e627892af7d28892915c
SHA256

377a1f937cb69cf3e47e1773055620b13a3d9c08e4c82e2a48fd0cdf90707608
SHA512

ee9d566716f4da14cf091aa2255c7176f4a12ab74e36a487361ec0beac585d6ffd9b56aa32b003f0a17b06d9565296d9cd484dad02173e527d2f3ddf27c55130
SSDEEP

6291456:lieVn9nxeR04QL+qUMH1ePA3ooIRfmJuJD+Nsg1O59CaMk0rhM6Dh8+3sji8+3au:H9noR0zjgA3oR+JXeXCaerVDG+m+l

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Embodiment of Scarlet Devil/The Embodiment of Scarlet Devil.exe
unpack001/Embodiment of Scarlet Devil/custom.exe
unpack001/Embodiment of Scarlet Devil/custom_e.exe
unpack001/Embodiment of Scarlet Devil/eosd.exe
unpack001/Embodiment of Scarlet Devil/kouma_update102h.EXE
unpack001/Embodiment of Scarlet Devil/th06_english_patch_0.8.exe

Files

(C62) [上海アリス幻樂団] 東方紅魔郷〜 The Embodiment of Scarlet Devil.rar
.rar
Embodiment of Scarlet Devil/Endings/Marisa Ending 2.bmp
Embodiment of Scarlet Devil/Endings/Thumbs.db
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Inivisible Hitbox/th06e_CM.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Inivisible Hitbox/th06e_TL.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Readme.txt
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Sound/IN/th06e_IN.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Sound/Original/th06e_IN.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Sound/PCB/th06e_IN.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Sound/SA/th06e_IN.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Sound/th06e_IN.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Visible Hitbox/th06e_CM.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/Visible Hitbox/th06e_TL.DAT
Embodiment of Scarlet Devil/EoSD Retexture Pack v0.3/th06e_ST.DAT
Embodiment of Scarlet Devil/The Embodiment of Scarlet Devil.exe
.exe windows:4 windows x86 arch:x86

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

dsound

ord11

d3d8

Direct3DCreate8

winmm

mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance

kernel32

GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

user32

DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA

gdi32

SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/bgm/th06_01.sfk
Embodiment of Scarlet Devil/bgm/th06_01.wav
Embodiment of Scarlet Devil/bgm/th06_02.sfk
Embodiment of Scarlet Devil/bgm/th06_02.wav
Embodiment of Scarlet Devil/bgm/th06_03.sfk
Embodiment of Scarlet Devil/bgm/th06_03.wav
Embodiment of Scarlet Devil/bgm/th06_04.sfk
Embodiment of Scarlet Devil/bgm/th06_04.wav
Embodiment of Scarlet Devil/bgm/th06_05.sfk
Embodiment of Scarlet Devil/bgm/th06_05.wav
Embodiment of Scarlet Devil/bgm/th06_06.sfk
Embodiment of Scarlet Devil/bgm/th06_06.wav
Embodiment of Scarlet Devil/bgm/th06_07.sfk
Embodiment of Scarlet Devil/bgm/th06_07.wav
Embodiment of Scarlet Devil/bgm/th06_08.sfk
Embodiment of Scarlet Devil/bgm/th06_08.wav
Embodiment of Scarlet Devil/bgm/th06_09.sfk
Embodiment of Scarlet Devil/bgm/th06_09.wav
Embodiment of Scarlet Devil/bgm/th06_10.sfk
Embodiment of Scarlet Devil/bgm/th06_10.wav
Embodiment of Scarlet Devil/bgm/th06_11.sfk
Embodiment of Scarlet Devil/bgm/th06_11.wav
Embodiment of Scarlet Devil/bgm/th06_12.sfk
Embodiment of Scarlet Devil/bgm/th06_12.wav
Embodiment of Scarlet Devil/bgm/th06_13.sfk
Embodiment of Scarlet Devil/bgm/th06_13.wav
Embodiment of Scarlet Devil/bgm/th06_14.sfk
Embodiment of Scarlet Devil/bgm/th06_14.wav
Embodiment of Scarlet Devil/bgm/th06_15.sfk
Embodiment of Scarlet Devil/bgm/th06_15.wav
Embodiment of Scarlet Devil/bgm/th06_16.sfk
Embodiment of Scarlet Devil/bgm/th06_16.wav
Embodiment of Scarlet Devil/bgm/th06_17.sfk
Embodiment of Scarlet Devil/bgm/th06_17.wav
Embodiment of Scarlet Devil/custom.exe
.exe windows:4 windows x86 arch:x86

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cygwin\home\zun\prog\th_custom\Release\th_custom.pdb

Imports

dinput8

DirectInput8Create

user32

DialogBoxParamA
GetDlgItemTextA
KillTimer
EndDialog
IsDlgButtonChecked
MessageBoxA
SetTimer
GetDlgItem
SendMessageA
SetDlgItemTextA
GetWindowLongA

kernel32

LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetEndOfFile
HeapSize
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
ReadFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/custom.txt
Embodiment of Scarlet Devil/custom_e.exe
.exe windows:4 windows x86 arch:x86

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cygwin\home\zun\prog\th_custom\Release\th_custom.pdb

Imports

dinput8

DirectInput8Create

user32

DialogBoxParamA
GetDlgItemTextA
KillTimer
EndDialog
IsDlgButtonChecked
MessageBoxA
SetTimer
GetDlgItem
SendMessageA
SetDlgItemTextA
GetWindowLongA

kernel32

LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetEndOfFile
HeapSize
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
ReadFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/eosd.exe
.exe windows:4 windows x86 arch:x86

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

dsound

ord11

d3d8

Direct3DCreate8

winmm

mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance

kernel32

GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

user32

DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA

gdi32

SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/kouma_update102h.EXE
.exe windows:4 windows x86 arch:x86

52c60479654e645ae5b6f545b927e90e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CloseHandle
GlobalFree
GetModuleFileNameA
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
MoveFileA
GlobalLock
FindClose
FindFirstFileA
lstrcpyA
GetLastError
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
lstrcatA
lstrlenA
DeleteFileA
LoadLibraryA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetStdHandle
GetFileType
HeapCreate
GetProcAddress
GetWindowsDirectoryA
GetCurrentProcess
RtlUnwind
GetCPInfo
FreeEnvironmentStringsW
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

SendDlgItemMessageA
SetDlgItemTextA
GetMessageA
DispatchMessageA
GetDesktopWindow
DestroyWindow
wsprintfA
PeekMessageA
TranslateMessage
MessageBoxA
PostQuitMessage
ShowWindow
CreateDialogParamA

shell32

ShellExecuteA

comctl32

ord17

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 783B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/log.txt
Embodiment of Scarlet Devil/readme.txt
Embodiment of Scarlet Devil/readme_english.txt
Embodiment of Scarlet Devil/replay/Th6_03.rpy
Embodiment of Scarlet Devil/replay/th6_01.rpy
Embodiment of Scarlet Devil/replay/th6_02.rpy
Embodiment of Scarlet Devil/replay/th6_04.rpy
Embodiment of Scarlet Devil/replay/th6_05.rpy
Embodiment of Scarlet Devil/replay/th6_06.rpy
Embodiment of Scarlet Devil/score.dat
Embodiment of Scarlet Devil/th06_english_patch_0.8.exe
.exe windows:4 windows x86 arch:x86

1cf4252ebbb4f173d97a6ef4f79a60b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

kernel32

ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
WaitForSingleObject
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
GlobalFree
MulDiv
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
SetFilePointer
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
lstrcpynA

user32

ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PeekMessageA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Embodiment of Scarlet Devil/th06e.cfg
Embodiment of Scarlet Devil/th06e_CM.DAT
Embodiment of Scarlet Devil/th06e_ED.DAT
Embodiment of Scarlet Devil/th06e_IN.DAT
Embodiment of Scarlet Devil/th06e_MD.DAT
Embodiment of Scarlet Devil/th06e_ST.DAT
Embodiment of Scarlet Devil/th06e_TL.DAT
Embodiment of Scarlet Devil/“Œ•ûg–‚‹½.cfg
Embodiment of Scarlet Devil/東方紅魔郷.cfg

Sharing

General

Malware Config

Signatures

Files

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

Imports

dinput8

dsound

d3d8

winmm

kernel32

user32

gdi32

Sections

.text Size: 420KB - Virtual size: 418KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 24KB - Virtual size: 2.4MB

.rsrc Size: 4KB - Virtual size: 3KB

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

PDB Paths

Imports

dinput8

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 48KB - Virtual size: 47KB

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

PDB Paths

Imports

dinput8

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 52KB - Virtual size: 48KB

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

Imports

dinput8

dsound

d3d8

winmm

kernel32

user32

gdi32

Sections

.text Size: 420KB - Virtual size: 418KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 24KB - Virtual size: 2.4MB

.rsrc Size: 4KB - Virtual size: 2KB

52c60479654e645ae5b6f545b927e90e

Headers

File Characteristics

Imports

kernel32

user32

shell32

comctl32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 783B

.data Size: 3KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

1cf4252ebbb4f173d97a6ef4f79a60b5

Headers

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 24KB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 48KB - Virtual size: 47KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 52KB - Virtual size: 48KB

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 24KB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 783B

.data
Size: 3KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 108KB

.ndata
Size: - Virtual size: 32KB

.rsrc
Size: 7KB - Virtual size: 8KB