Overview
overview
3Static
static
3Touhou PC9...nt.exe
windows7-x64
3Touhou PC9...nt.exe
windows10-2004-x64
3Touhou PC9...01.bat
windows7-x64
3Touhou PC9...01.bat
windows10-2004-x64
3Touhou PC9...1e.bat
windows7-x64
3Touhou PC9...1e.bat
windows10-2004-x64
3Touhou PC9...1j.bat
windows7-x64
3Touhou PC9...1j.bat
windows10-2004-x64
3Touhou PC9...2e.bat
windows7-x64
3Touhou PC9...2e.bat
windows10-2004-x64
3Touhou PC9...2j.bat
windows7-x64
3Touhou PC9...2j.bat
windows10-2004-x64
3Touhou PC9...3e.bat
windows7-x64
3Touhou PC9...3e.bat
windows10-2004-x64
3Touhou PC9...3j.bat
windows7-x64
3Touhou PC9...3j.bat
windows10-2004-x64
3Touhou PC9...4e.bat
windows7-x64
3Touhou PC9...4e.bat
windows10-2004-x64
3Touhou PC9...4j.bat
windows7-x64
3Touhou PC9...4j.bat
windows10-2004-x64
3Touhou PC9...5e.bat
windows7-x64
3Touhou PC9...5e.bat
windows10-2004-x64
3Touhou PC9...5j.bat
windows7-x64
3Touhou PC9...5j.bat
windows10-2004-x64
3Touhou PC9...er.bat
windows7-x64
1Touhou PC9...er.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Touhou PC98 Collection/GAMES/np21nt.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Touhou PC98 Collection/GAMES/np21nt.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Touhou PC98 Collection/GAMES/th01.bat
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Touhou PC98 Collection/GAMES/th01.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Touhou PC98 Collection/GAMES/th01e.bat
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Touhou PC98 Collection/GAMES/th01e.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Touhou PC98 Collection/GAMES/th01j.bat
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Touhou PC98 Collection/GAMES/th01j.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Touhou PC98 Collection/GAMES/th02e.bat
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Touhou PC98 Collection/GAMES/th02e.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Touhou PC98 Collection/GAMES/th02j.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Touhou PC98 Collection/GAMES/th02j.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Touhou PC98 Collection/GAMES/th03e.bat
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Touhou PC98 Collection/GAMES/th03e.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Touhou PC98 Collection/GAMES/th03j.bat
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Touhou PC98 Collection/GAMES/th03j.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Touhou PC98 Collection/GAMES/th04e.bat
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
Touhou PC98 Collection/GAMES/th04e.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Touhou PC98 Collection/GAMES/th04j.bat
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Touhou PC98 Collection/GAMES/th04j.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Touhou PC98 Collection/GAMES/th05e.bat
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Touhou PC98 Collection/GAMES/th05e.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Touhou PC98 Collection/GAMES/th05j.bat
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
Touhou PC98 Collection/GAMES/th05j.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Touhou PC98 Collection/Launcher.bat
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Touhou PC98 Collection/Launcher.bat
Resource
win10v2004-20240802-en
General
-
Target
Touhou PC98 Collection.zip
-
Size
31.4MB
-
MD5
8a0fe592803dd9106e0d3ed81932090b
-
SHA1
441a0dfc2c403fbbc57f64690f98d61c2730e827
-
SHA256
b572b5796a4d51d7f132d3a2e44ce55bc29829de76a7640d99ec098b3f8aff25
-
SHA512
82b5ddbaf5de817b9478034526400948a4488d7488dedbdc0b429c4e6d6448f0681c269acab0525957446bf99f02def806aeb5c59ddf59504bcf85fdd54e5076
-
SSDEEP
786432:cI1pP0WILJ9HhgN3HUVfrsmN8VY5YBUjQa0YBUI+u:cIf0WILzBgN3H8rJj5YyQjYyu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Touhou PC98 Collection/GAMES/np21nt.exe
Files
-
Touhou PC98 Collection.zip.zip
-
Touhou PC98 Collection/GAMES/2608_BD.WAV
-
Touhou PC98 Collection/GAMES/2608_HH.WAV
-
Touhou PC98 Collection/GAMES/2608_RIM.WAV
-
Touhou PC98 Collection/GAMES/2608_SD.WAV
-
Touhou PC98 Collection/GAMES/2608_TOM.WAV
-
Touhou PC98 Collection/GAMES/2608_TOP.WAV
-
Touhou PC98 Collection/GAMES/ENHANCED.TXT
-
Touhou PC98 Collection/GAMES/FONT.ROM
-
Touhou PC98 Collection/GAMES/np21nt.exe.exe windows:4 windows x86 arch:x86
c47af159cf4ffe1f779e58da5d2b51a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
SizeofResource
LockResource
LoadResource
FindResourceW
GetOEMCP
WaitForSingleObject
ResetEvent
SetEvent
GetPrivateProfileStringW
lstrcpynW
MoveFileExW
GetCurrentThread
SetThreadPriority
CreateEventW
GetModuleFileNameW
GetCommandLineW
WideCharToMultiByte
WaitForMultipleObjects
OpenMutexW
GetLocalTime
MoveFileW
GetTempPathW
LocalFree
InterlockedExchange
LocalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
LoadLibraryA
GetACP
GetCPInfo
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
FindNextFileW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
RaiseException
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
HeapSize
HeapReAlloc
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsGetValue
TlsSetValue
GetCurrentThreadId
CreateThread
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
lstrcmpW
FindClose
GetLastError
GetFileAttributesW
DeleteFileW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEndOfFile
SetFilePointer
GetModuleHandleW
ClearCommError
ReadFile
GetCommState
SetCommState
WriteFile
CreateFileW
CloseHandle
GlobalAlloc
GlobalFree
lstrcatW
MultiByteToWideChar
lstrcpyW
LoadLibraryW
lstrlenW
FreeLibrary
GetProcAddress
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetFileSize
LCMapStringA
CreateFileA
user32
CharLowerW
GetKeyboardState
IsMenu
PostMessageW
ClientToScreen
GetClientRect
GetParent
EndDialog
SetFocus
GetWindowRect
EnableWindow
GetDlgItem
SetDlgItemTextW
SendMessageW
GetDlgItemTextW
SendDlgItemMessageW
DialogBoxParamW
GetWindowLongW
SetWindowTextW
GetWindowTextW
InvalidateRect
TrackPopupMenu
GetCursorPos
LoadIconW
GetDlgCtrlID
ShowWindow
PtInRect
AppendMenuW
SetMenuItemInfoW
DeleteMenu
ScreenToClient
RegisterClassW
LoadCursorW
DefDlgProcW
MoveWindow
SystemParametersInfoW
DestroyMenu
DrawMenuBar
GetMenu
SetMenu
SetWindowPos
ShowCursor
ClipCursor
GetDC
ReleaseDC
wsprintfW
SetWindowLongW
IsWindow
ModifyMenuW
GetSubMenu
GetMenuState
LoadBitmapW
PostQuitMessage
WINNLSEnableIME
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetKeyboardType
SetForegroundWindow
FindWindowW
ChangeDisplaySettingsW
EnumDisplaySettingsW
DrawFocusRect
CallWindowProcW
LoadImageW
CloseWindow
SetCursorPos
GetClassLongW
SetClassLongW
EnableMenuItem
GetSystemMenu
LoadMenuW
CreatePopupMenu
InsertMenuW
InsertMenuItemW
GetMenuItemCount
GetMenuItemInfoW
FillRect
SetRect
GetKeyState
CheckMenuItem
GetSystemMetrics
CreateWindowExW
UpdateWindow
DestroyWindow
GetAsyncKeyState
MessageBoxW
DefWindowProcW
BeginPaint
EndPaint
SetScrollInfo
gdi32
SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
GetSystemPaletteEntries
SetDIBColorTable
GetTextExtentPoint32W
GetStockObject
SetDIBitsToDevice
CreateFontW
DeleteObject
ChoosePixelFormat
GetDeviceCaps
GdiFlush
SetStretchBltMode
StretchBlt
SwapBuffers
TextOutW
DeleteDC
SetPixelFormat
SelectObject
BitBlt
CreateCompatibleDC
CreateDIBSection
GetObjectW
PatBlt
SetBkColor
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
DragQueryFileW
ShellExecuteW
DragAcceptFiles
DragFinish
ole32
CoUninitialize
CoInitialize
ddraw
DirectDrawCreate
dsound
ord1
winmm
midiOutGetDevCapsW
midiOutGetNumDevs
midiInGetDevCapsW
midiInGetNumDevs
midiInStart
midiInAddBuffer
midiInPrepareHeader
midiOutClose
midiInReset
midiInOpen
midiOutReset
midiOutOpen
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
joyGetNumDevs
joyGetPos
midiInStop
midiInUnprepareHeader
midiInClose
midiOutPrepareHeader
midiOutLongMsg
comctl32
CreatePropertySheetPageW
PropertySheetW
wsock32
WSACleanup
closesocket
WSAGetLastError
connect
htons
WSAAsyncSelect
socket
WSAStartup
send
recv
inet_ntoa
dinput8
DirectInput8Create
opengl32
glViewport
glTexSubImage2D
glClearColor
glClear
glColor3f
glEnable
glBegin
glTexCoord2f
glVertex2d
glEnd
glDisable
glPixelZoom
glRasterPos2i
glDrawPixels
glFlush
wglCreateContext
wglMakeCurrent
glPixelStorei
glTexImage2D
glTexParameteri
glGetString
wglGetProcAddress
wglDeleteContext
Sections
.text Size: 724KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Touhou PC98 Collection/GAMES/np21nt.ini
-
Touhou PC98 Collection/GAMES/th01.bat
-
Touhou PC98 Collection/GAMES/th01e.bat
-
Touhou PC98 Collection/GAMES/th01e.hdi
-
Touhou PC98 Collection/GAMES/th01e.ini
-
Touhou PC98 Collection/GAMES/th01j.bat
-
Touhou PC98 Collection/GAMES/th01j.hdi
-
Touhou PC98 Collection/GAMES/th01j.ini
-
Touhou PC98 Collection/GAMES/th02e.bat
-
Touhou PC98 Collection/GAMES/th02e.hdi
-
Touhou PC98 Collection/GAMES/th02e.ini
-
Touhou PC98 Collection/GAMES/th02j.bat
-
Touhou PC98 Collection/GAMES/th02j.hdi
-
Touhou PC98 Collection/GAMES/th02j.ini
-
Touhou PC98 Collection/GAMES/th03e.bat
-
Touhou PC98 Collection/GAMES/th03e.hdi
-
Touhou PC98 Collection/GAMES/th03e.ini
-
Touhou PC98 Collection/GAMES/th03j.bat
-
Touhou PC98 Collection/GAMES/th03j.hdi
-
Touhou PC98 Collection/GAMES/th03j.ini
-
Touhou PC98 Collection/GAMES/th04e.bat
-
Touhou PC98 Collection/GAMES/th04e.hdi
-
Touhou PC98 Collection/GAMES/th04e.ini
-
Touhou PC98 Collection/GAMES/th04j.bat
-
Touhou PC98 Collection/GAMES/th04j.hdi
-
Touhou PC98 Collection/GAMES/th04j.ini
-
Touhou PC98 Collection/GAMES/th05e.bat
-
Touhou PC98 Collection/GAMES/th05e.hdi
-
Touhou PC98 Collection/GAMES/th05e.ini
-
Touhou PC98 Collection/GAMES/th05j.bat
-
Touhou PC98 Collection/GAMES/th05j.hdi
-
Touhou PC98 Collection/GAMES/th05j.ini
-
Touhou PC98 Collection/Launcher.bat