Virtua-Cop-2_Win_EN[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Virtua-Cop-2_Win_EN.zip
Size

12.0MB
MD5

5eafabd932bb4ddd6eb33fd80cc02c21
SHA1

a410bb396e54d7d9f89aa72a683a08d73443296d
SHA256

ad08c6dee52f6cc6f5c24cdf140e22ffaaf6281413d320114cad9388c849f876
SHA512

2c1a4456bfbb16e57cde886da258d71a99ac18f46b56968281a4e86571c6383221ef3ec08053de97594db3845e581a442809662889a77811d1e7f73b283703fe
SSDEEP

196608:tPdW0L4ldwYgDSyPdQeQ1GGz0HRuNQbo+p//CUIbkGp7n27dP+Ph6vXXqUB:tlpL4ldZgDSSrGD0HRGl+hKk0j27dGJE

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VirtuaCop2/DDGL.DLL
unpack001/VirtuaCop2/DPCTRL.DLL
unpack001/VirtuaCop2/HGL_D3D.DLL
unpack001/VirtuaCop2/HGL_DD.DLL
unpack001/VirtuaCop2/PG_STG1.DLL
unpack001/VirtuaCop2/PG_STG2.DLL
unpack001/VirtuaCop2/PG_STG3.DLL
unpack001/VirtuaCop2/PPJ2DD.EXE
unpack001/VirtuaCop2/WINCPUID.DLL

Files

Virtua-Cop-2_Win_EN.zip
.zip

Password: uuu
VirtuaCop2/BIN/CAMMOV0.BIN
VirtuaCop2/BIN/CAMMOV1.BIN
VirtuaCop2/BIN/CAMMOV2.BIN
VirtuaCop2/BIN/CAMMOV3.BIN
VirtuaCop2/BIN/L_ADV.BIN
VirtuaCop2/BIN/L_COMMON.BIN
VirtuaCop2/BIN/L_FANG.BIN
VirtuaCop2/BIN/L_LOGO.BIN
VirtuaCop2/BIN/L_MINI_C.BIN
VirtuaCop2/BIN/L_NAME.BIN
VirtuaCop2/BIN/L_RANK.BIN
VirtuaCop2/BIN/L_SELECT.BIN
VirtuaCop2/BIN/L_STG10.BIN
VirtuaCop2/BIN/L_STG11.BIN
VirtuaCop2/BIN/L_STG12.BIN
VirtuaCop2/BIN/L_STG1C.BIN
VirtuaCop2/BIN/L_STG20.BIN
VirtuaCop2/BIN/L_STG21.BIN
VirtuaCop2/BIN/L_STG22.BIN
VirtuaCop2/BIN/L_STG2C.BIN
VirtuaCop2/BIN/L_STG30.BIN
VirtuaCop2/BIN/L_STG31.BIN
VirtuaCop2/BIN/L_STG32.BIN
VirtuaCop2/BIN/L_STG3C.BIN
VirtuaCop2/BIN/L_TITLE.BIN
VirtuaCop2/BIN/MOTADV.BIN
VirtuaCop2/BIN/MOTCMN.BIN
VirtuaCop2/BIN/MOTFAED.BIN
VirtuaCop2/BIN/MOTINT.BIN
VirtuaCop2/BIN/MOTSTG1.BIN
VirtuaCop2/BIN/MOTSTG2.BIN
VirtuaCop2/BIN/MOTSTG3.BIN
VirtuaCop2/BIN/P_ADV.BIN
VirtuaCop2/BIN/P_COMMON.BIN
VirtuaCop2/BIN/P_FANG.BIN
VirtuaCop2/BIN/P_MINI_C.BIN
VirtuaCop2/BIN/P_NAME.BIN
VirtuaCop2/BIN/P_OPTION.BIN
VirtuaCop2/BIN/P_SEL.BIN
VirtuaCop2/BIN/P_SELECT.BIN
VirtuaCop2/BIN/P_STG10.BIN
VirtuaCop2/BIN/P_STG11.BIN
VirtuaCop2/BIN/P_STG12.BIN
VirtuaCop2/BIN/P_STG1C.BIN
VirtuaCop2/BIN/P_STG20.BIN
VirtuaCop2/BIN/P_STG21.BIN
VirtuaCop2/BIN/P_STG22.BIN
VirtuaCop2/BIN/P_STG2C.BIN
VirtuaCop2/BIN/P_STG30.BIN
VirtuaCop2/BIN/P_STG31.BIN
VirtuaCop2/BIN/P_STG32.BIN
VirtuaCop2/BIN/P_STG3C.BIN
VirtuaCop2/BIN/SCENE10.BIN
VirtuaCop2/BIN/SCENE11.BIN
VirtuaCop2/BIN/SCENE12.BIN
VirtuaCop2/BIN/SCENE20.BIN
VirtuaCop2/BIN/SCENE21.BIN
VirtuaCop2/BIN/SCENE22.BIN
VirtuaCop2/BIN/SCENE30.BIN
VirtuaCop2/BIN/SCENE31.BIN
VirtuaCop2/BIN/SCENE32.BIN
VirtuaCop2/BIN/SCENEAD.BIN
VirtuaCop2/BIN/SCENEFA.BIN
VirtuaCop2/BIN/T_ADV.BIN
VirtuaCop2/BIN/T_COMMON.BIN
VirtuaCop2/BIN/T_FANG.BIN
VirtuaCop2/BIN/T_LOGO.BIN
VirtuaCop2/BIN/T_MINI_C.BIN
VirtuaCop2/BIN/T_RANK.BIN
VirtuaCop2/BIN/T_SELECT.BIN
VirtuaCop2/BIN/T_STG10.BIN
VirtuaCop2/BIN/T_STG11.BIN
VirtuaCop2/BIN/T_STG12.BIN
VirtuaCop2/BIN/T_STG1C.BIN
VirtuaCop2/BIN/T_STG20.BIN
VirtuaCop2/BIN/T_STG21.BIN
VirtuaCop2/BIN/T_STG22.BIN
VirtuaCop2/BIN/T_STG2C.BIN
VirtuaCop2/BIN/T_STG30.BIN
VirtuaCop2/BIN/T_STG31.BIN
VirtuaCop2/BIN/T_STG32.BIN
VirtuaCop2/BIN/T_STG3C.BIN
VirtuaCop2/BIN/T_TITLE.BIN
VirtuaCop2/DDGL.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

b2f9ce972ceeb0ba415adc2a98d615b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

DdglFunc
DdglResult

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/DPCTRL.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

2b957a91d78133bf9a73e5e32e008ca1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
HeapCreate
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
FlushFileBuffers
LoadLibraryA
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
GetStdHandle
GetFileType
SetHandleCount
SetFilePointer
SetStdHandle
HeapAlloc
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapDestroy
lstrcpyA
VirtualFree
InitializeCriticalSection
GetCurrentThreadId
GetCurrentProcess
ExitProcess
VirtualAlloc
TerminateProcess
TlsGetValue
GetLastError
TlsSetValue
TlsAlloc
TlsFree
SetLastError

user32

EnableWindow
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
wsprintfA
DialogBoxParamA
GetDC
ReleaseDC
GetKeyState
ShowCursor
MessageBoxA
SendMessageA
SetFocus
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
SetTimer
GetDlgItem
EndDialog
KillTimer

gdi32

GetTextExtentPoint32A

dplayx

ord4
ord1
ord2

winmm

timeGetTime

Exports

Exports

ChatStart
CheckLobby
CloseProvider
DestroyDirectPlay
GetPlayerName
GetRivalName
InitialDirectPlay
ReceiveDirectPlay
SWDataSyncReceive
SWDataSyncSend
SendDirectPlay
SendDirectPlaySWResetMessage
SendDirectPlayWaitMessage

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/HGL_D3D.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

9e49de513db072113b19c1655904ce3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GlobalAlloc
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcmpiA
lstrcmpA
GetLastError
CloseHandle
GetFileSize
ReadFile
GetModuleHandleA
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
LoadLibraryA
VirtualAlloc
HeapFree
GetCommandLineA
GetProcAddress
GlobalFree
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetEnvironmentStrings
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
EnterCriticalSection
LeaveCriticalSection
HeapAlloc

user32

ReleaseDC
GetWindowDC
SetRect
GetWindowRect
SystemParametersInfoA
GetDlgItem
SetWindowPos
AdjustWindowRectEx
GetMenu
GetWindowLongA
GetClientRect
GetDC
SetFocus
wsprintfA
ClientToScreen
DialogBoxParamA
IsDlgButtonChecked
SendDlgItemMessageA
EndDialog
CheckDlgButton
EnableWindow

gdi32

CreateCompatibleDC
CreateDIBSection
DeleteObject
BitBlt
SelectObject
GetDeviceCaps
StretchBlt
SetStretchBltMode
CreatePen
DeleteDC
Rectangle
CreateSolidBrush

winmm

timeGetTime

ddraw

DirectDrawEnumerateA
DirectDrawCreate

ddgl

DdglFunc

Exports

Exports

hFunc
hGetDLLName

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/HGL_DD.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

8cbf47020791dd3ed25e6013566b6b26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
CloseHandle
GlobalAlloc
lstrlenA
WritePrivateProfileStringA
ReadFile
GetFileSize
GetPrivateProfileIntA
CreateFileA
GetLastError
TlsAlloc
GetCurrentThreadId
TlsSetValue
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetStdHandle
SetFilePointer
GetACP
GetCPInfo
FlushFileBuffers
LoadLibraryA
TlsFree
GetOEMCP
GetModuleFileNameA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
HeapDestroy
DeleteCriticalSection
HeapCreate
SetLastError
TlsGetValue
GetStdHandle
VirtualFree
SetHandleCount
GetFileType
GetStartupInfoA

user32

DialogBoxParamA
EndDialog
IsDlgButtonChecked
SendDlgItemMessageA
EnableWindow
wsprintfA
MessageBoxA
GetDlgItem
CheckDlgButton
GetClientRect
ClientToScreen
ReleaseDC
GetDC
GetWindowDC
GetWindowRect
SystemParametersInfoA
SetWindowPos
AdjustWindowRectEx
GetMenu
GetWindowLongA
SetFocus

gdi32

Rectangle
SetStretchBltMode
SelectObject
SetBkMode
SetTextColor
DeleteDC
CreateDIBSection
GetSystemPaletteEntries
CreateFontA
DeleteObject
TextOutA
CreatePen
CreateSolidBrush
CreateCompatibleDC
StretchBlt
GetDeviceCaps
BitBlt

winmm

timeGetTime

ddraw

DirectDrawCreate

wincpuid

GetProcessorID

ddgl

DdglFunc
DdglResult

Exports

Exports

hFunc
hGetDLLName

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 937B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/OPENING.BMP
VirtuaCop2/PG_STG1.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

f1d01cbe9b7926af25b09532232577c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

GetModuleFileNameA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle

Exports

Exports

GetPGDLLInfo

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 923B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 865KB - Virtual size: 869KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/PG_STG2.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

f1d01cbe9b7926af25b09532232577c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

GetModuleFileNameA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle

Exports

Exports

GetPGDLLInfo

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 923B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 457KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/PG_STG3.DLL
.dll windows:4 windows x86 arch:x86

Password: uuu

f1d01cbe9b7926af25b09532232577c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

GetModuleFileNameA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle

Exports

Exports

GetPGDLLInfo

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 923B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/PLEASE.BMP
VirtuaCop2/PPJ2DD.EXE
.exe windows:4 windows x86 arch:x86

Password: uuu

bf1cdf2d556b5647e9b789123583664f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcmpA
FindNextFileA
GlobalFree
CloseHandle
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
ReleaseMutex
WaitForSingleObject
CreateMutexA
WritePrivateProfileStringA
FindClose
_lclose
_lopen
GetDriveTypeA
lstrcatA
GetLogicalDrives
GetSystemDefaultLangID
GlobalLock
GetLastError
lstrlenA
DeviceIoControl
UnmapViewOfFile
LocalFree
MapViewOfFile
CreateFileMappingA
LocalAlloc
GetPrivateProfileStringA
lstrcmpiA
GetPrivateProfileIntA
GlobalHandle
GlobalUnlock
GetACP
LCMapStringW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
ExitProcess
GetVersion
GetCPInfo
GetOEMCP
LCMapStringA
TerminateProcess
GetCommandLineA
SetHandleCount
GetFileType
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetStringTypeA
GetStartupInfoA
GetStringTypeW
GetModuleHandleA

user32

PostQuitMessage
DispatchMessageA
ShowCursor
KillTimer
SetTimer
GetClientRect
DestroyWindow
WinHelpA
DrawMenuBar
DefWindowProcA
LoadIconA
LoadCursorA
GetSystemMetrics
CreateWindowExA
EnableWindow
SetForegroundWindow
MessageBoxA
PostMessageA
EndDialog
SendMessageA
GetDlgItem
ShowWindow
DialogBoxParamA
UpdateWindow
LoadAcceleratorsA
PeekMessageA
CreateMenu
DestroyMenu
SetFocus
SetDlgItemTextA
AppendMenuA
InsertMenuA
EnableMenuItem
GetMenu
CheckMenuItem
wsprintfA
CheckRadioButton
TranslateMessage
TranslateAcceleratorA
RegisterClassA

winmm

midiOutPrepareHeader
midiOutReset
midiOutUnprepareHeader
midiStreamClose
midiStreamPause
midiStreamOpen
midiStreamProperty
midiStreamOut
midiStreamRestart
joyGetDevCapsA
joyGetPosEx
mciSendCommandA
timeGetTime

dinput

DirectInputCreateA

dsound

DirectSoundCreate

comctl32

ord17

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 511KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/README.TXT
VirtuaCop2/SE/SONG1.MDS
VirtuaCop2/SE/SONG2.MDS
VirtuaCop2/SE/SOUND11.WVP
VirtuaCop2/SE/SOUND12.WVP
VirtuaCop2/SE/SOUND13.WVP
VirtuaCop2/SE/SOUND14.WVP
VirtuaCop2/SE/SOUND15.WVP
VirtuaCop2/SE/SOUND16.WVP
VirtuaCop2/SE/SOUND17.WVP
VirtuaCop2/SE/SOUND18.WVP
VirtuaCop2/SE/SOUND19.WVP
VirtuaCop2/SE/SOUND1A.WVP
VirtuaCop2/SE/SOUND1B.WVP
VirtuaCop2/SE/SOUND1C.WVP
VirtuaCop2/SE/SOUND20.WVP
VirtuaCop2/SE/SOUND23.WVP
VirtuaCop2/SE/SOUND24.WVP
VirtuaCop2/SE/SOUND25.WVP
VirtuaCop2/SE/SOUND26.WVP
VirtuaCop2/SE/SOUND27.WVP
VirtuaCop2/SE/SOUND29.WVP
VirtuaCop2/SE/SOUND30.WVP
VirtuaCop2/VC2.CNT
VirtuaCop2/VC2.EXE
VirtuaCop2/VC2.HLP
VirtuaCop2/VCOP2.INI
VirtuaCop2/WINCPUID.DLL
.dll windows:4 windows x86 arch:x86

2f0c0bca0bd0db3214ef4d9a148e5146

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
lstrcatA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
UnhandledExceptionFilter
HeapAlloc
DebugBreak
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
HeapReAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
SetConsoleCtrlHandler
RtlUnwind
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers
SetStdHandle
Sleep
CloseHandle
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
GetLocaleInfoW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

GetProcessorID

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VirtuaCop2/vc2.GID

Sharing

General

Malware Config

Signatures

Files

Password: uuu

Password: uuu

b2f9ce972ceeb0ba415adc2a98d615b3

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 269KB - Virtual size: 268KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 5.3MB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 924B

.reloc Size: 46KB - Virtual size: 45KB

Password: uuu

2b957a91d78133bf9a73e5e32e008ca1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

dplayx

winmm

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 110KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

Password: uuu

9e49de513db072113b19c1655904ce3d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

ddraw

ddgl

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 13KB - Virtual size: 14.9MB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 33KB - Virtual size: 32KB

Password: uuu

8cbf47020791dd3ed25e6013566b6b26

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

ddraw

wincpuid

ddgl

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 1024B - Virtual size: 937B

.data Size: 5KB - Virtual size: 5.9MB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 269KB - Virtual size: 268KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 5.3MB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 924B

.reloc
Size: 46KB - Virtual size: 45KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 110KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 13KB - Virtual size: 14.9MB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 33KB - Virtual size: 32KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 1024B - Virtual size: 937B

.data
Size: 5KB - Virtual size: 5.9MB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 15KB - Virtual size: 15KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 1024B - Virtual size: 923B

.data
Size: 865KB - Virtual size: 869KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 1024B - Virtual size: 923B

.data
Size: 457KB - Virtual size: 461KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 1024B - Virtual size: 923B

.data
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 303KB - Virtual size: 302KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 511KB - Virtual size: 3.7MB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 88KB - Virtual size: 88KB

.reloc
Size: 57KB - Virtual size: 57KB