c:\Users\Lenovo\Desktop\Closed Area 完整版 英文\Release\Closed Area.pdb
Static task
static1
1 signatures
General
-
Target
Closed Area.exe
-
Size
514KB
-
MD5
ee92ee02076bc251d891bb483fe084ff
-
SHA1
52be4daec5e0ae010f88fc47219f3ff5cbdfe7d2
-
SHA256
c7f9a0d71700ccc179d855fe040bff93a1c947a936409705c42455b7cf5e9ec9
-
SHA512
101dcf1049ea107c7ed20ab3be31a1dcb2243331c4bfd2ca05fa5e17c53afc44ceb3a44e2acb2b80b6fd8e4108dda654637c2add7fb5e11a8acb738b09aa3a10
-
SSDEEP
12288:28GhSSjoKlwV1hapbSr8xbqI8o2sidA39agvoZDyRoiMLnyYL6eeu:28GhSSjoKlwV1cpbSrMA/d
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Closed Area.exe
Files
-
Closed Area.exe.exe windows:5 windows x86 arch:x86
8cacd0e1fd6d8b7814925b0341c2cf41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateFontIndirectW
dinput8
DirectInput8Create
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
GetFileSize
ReadFile
CreateFileW
CloseHandle
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
user32
CreateWindowExW
IsWindowEnabled
MessageBoxW
GetCursorPos
EndPaint
SetTimer
GetWindowRect
PostQuitMessage
LoadCursorW
GetClientRect
BeginPaint
TranslateMessage
ShowCursor
LoadIconW
PeekMessageW
ShowWindow
ScreenToClient
RegisterClassW
GetSystemMetrics
UpdateWindow
DefWindowProcW
MoveWindow
DispatchMessageW
wsprintfW
gdi32
GetStockObject
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
msvcp90
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
msvcr90
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
__p__fmode
__set_app_type
_XcptFilter
_exit
_cexit
__getmainargs
_crt_debugger_hook
_invoke_watson
_controlfp_s
memset
__CxxFrameHandler3
_except_handler4_common
??_V@YAXPAX@Z
sscanf_s
memcpy
vsprintf_s
rand
fopen_s
fread
fwrite
fclose
srand
exit
??2@YAPAXI@Z
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 256.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ