Technical Information
Modifies file system
Creates the following files
- %TEMP%\gameico.png
- %TEMP%\gameico.bmp
- %TEMP%\gamedogpic1.jpg
- %TEMP%\gamedogpic1.bmp
- %TEMP%\gamedogpic2.jpg
- %TEMP%\gamedogpic2.bmp
- %TEMP%\gamedogpic3.jpg
- %TEMP%\gamedogpic3.bmp
- %TEMP%\setup.exe
- %TEMP%\nsxeba6.tmp\modern-header.bmp
- %TEMP%\nsxeba6.tmp\modern-wizard.bmp
- %TEMP%\nsxeba6.tmp\nsdialogs.dll
- %TEMP%\nsxeba6.tmp\system.dll
Network activity
Connects to
- 'zh#####api.gamedog.cn':80
- 'im##.gamedog.cn':80
- 'pc#.#amedog.cn':80
TCP
HTTP GET requests
- http://zh#####api.gamedog.cn/index.php?m=###################
- http://im##.gamedog.cn/2014/12/20/72-1412201219250.jpg
- http://im##.gamedog.cn/2014/12/20/72-1412201441040.jpg
- http://im##.gamedog.cn/2014/12/20/72-1412201441050.jpg
- http://im##.gamedog.cn/2014/12/20/72-1412201441060.jpg
- http://pc#.#amedog.cn/soft/zhushou/pc/setup.exe
UDP
- DNS ASK zh#####api.gamedog.cn
- DNS ASK im##.gamedog.cn
- DNS ASK pc#.#amedog.cn
Miscellaneous
Creates and executes the following
- '%TEMP%\setup.exe'
