d:\__svn\ENTERBRAIN\アクションツクール\ACPlayer\ACPlayer\Release\ACPlayer.pdb
Static task
static1
General
-
Target
ShironoYakata-DEMO-A_ver1.40.exe
-
Size
956KB
-
MD5
289ff3079771edd9e2eda489b39c307f
-
SHA1
203726460d409e2ffd483d0d7760d79a45db7ad3
-
SHA256
1367de4fbdb19737e0b1b7ad6a1612c04673a971a6ba63436d6330eeed50e11b
-
SHA512
55832f4a32f416c14388aea6ac44b23560d7f446b643072d498c52052f9c82f5d45b9d1b38a819582e9e2ca07b7a8c540e8e3f1b51e5dd564f5f5709be49988c
-
SSDEEP
6144:wc6jO+Pmk3knp2DLG+5lY6ho/hbSxF8/mOTDoTDMH:wc6S+ukUnp2DK+5Hh62xueOow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ShironoYakata-DEMO-A_ver1.40.exe
Files
-
ShironoYakata-DEMO-A_ver1.40.exe.exe windows:4 windows x86 arch:x86
c948c7292a2d330b994a56de77abc32e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetPrivateProfileIntW
lstrcpyW
Sleep
GetOEMCP
GetLastError
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
ReadFile
CreateFileW
SetFilePointer
CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
SizeofResource
LockResource
FindResourceW
LoadResource
GetModuleHandleW
CopyFileW
GetFileSize
DeleteFileW
WriteFile
FlushFileBuffers
CreateFileA
WritePrivateProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleFileNameW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetSystemTimeAsFileTime
OutputDebugStringW
FindFirstFileW
FindNextFileW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrcpynW
FindClose
GetFullPathNameW
LCMapStringA
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
RaiseException
InterlockedDecrement
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
EndDialog
SetWindowLongW
GetDlgItem
DialogBoxParamW
DispatchMessageW
PeekMessageW
GetKeyState
DefWindowProcW
SetMenuItemInfoW
PostMessageW
UnregisterClassW
DestroyMenu
AdjustWindowRect
LoadMenuW
UpdateWindow
PostQuitMessage
SendMessageW
GetWindowRect
ScreenToClient
LoadIconW
RegisterClassExW
SetCursor
DestroyWindow
GetMenu
GetDC
ReleaseDC
GetDesktopWindow
MessageBoxW
SetWindowPos
GetCursorPos
LoadStringW
GetMenuItemInfoW
ShowWindow
SetMenu
TranslateMessage
CreateWindowExW
gdi32
GetCharWidth32W
GetDeviceCaps
ole32
CoUninitialize
CoInitializeEx
imm32
ImmDisableIME
d3d9
Direct3DCreate9
d3dx9_39
D3DXVec2Normalize
D3DXCreateTextureFromResourceExW
D3DXCreateLine
D3DXCreateSprite
D3DXCreateFontW
D3DXMatrixMultiply
D3DXCreateTextureFromFileInMemoryEx
dsound
ord11
dinput8
DirectInput8Create
winmm
mmioClose
mmioOpenW
mmioAscend
timeBeginPeriod
timeGetDevCaps
mmioRead
mmioSeek
timeGetTime
mmioDescend
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 712KB - Virtual size: 710KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ