Static task
static1
Behavioral task
behavioral1
Sample
barony.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
barony.exe
Resource
win10v2004-20221111-en
General
-
Target
barony.exe
-
Size
2.9MB
-
MD5
7d5f46cb47f71a21bcbfe091dc2d9830
-
SHA1
e2b877f29b141531ce39086a540b9a6f7bdc5987
-
SHA256
f5e3ec0d2ca0a74372cab1e3778dc862918a0895d0287c215ddd5b8104694f0b
-
SHA512
4ffc0048fc25d6a47729e91d879916ee20aa41498de64925faef5515c651bc5874bd37c68b9f28803ce14ffb7657a81ef7ce4406c08ca5ac9b1913c9fa195309
-
SSDEEP
49152:OBaJrRz64FRlNJ4t1gYDfRdZ7lUaMMBtXDzgdDzf6th8n9mnDGoi:i0roIlNJ4t1gYDfRdZ7OaMMzDEp+
Malware Config
Signatures
Files
-
barony.exe.exe windows x86
81ca9a7a4a116680a33794f90da7571b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glScalef
glColorPointer
glColor4ub
glDrawArrays
glLightModelfv
glDisableClientState
glDepthMask
glVertex3f
glVertexPointer
glEnableClientState
glDepthRange
glReadPixels
glClearColor
glDeleteTextures
glColorMask
glBlendFunc
glCullFace
glGenTextures
glPixelStorei
glTexImage2D
glTexParameteri
glTexEnvf
glPopMatrix
glGetIntegerv
glOrtho
glPushMatrix
glDisable
glColor4f
glRotatef
glVertex2f
glTranslatef
glBegin
glLoadIdentity
glColor3f
glLineWidth
glMatrixMode
glTexCoord2f
glScissor
glEnd
glEnable
glBindTexture
glClear
glViewport
glu32
gluPerspective
sdl2
SDL_SetMainReady
SDL_free
SDL_iconv_string
SDL_wcslen
SDL_malloc
SDL_isspace
SDL_MapRGB
SDL_MapRGBA
SDL_FreeSurface
SDL_UnlockSurface
SDL_UpperBlit
SDL_LockSurface
SDL_CreateRGBSurface
SDL_GetPerformanceCounter
SDL_SetRelativeMouseMode
SDL_SetClipboardText
SDL_GetClipboardText
SDL_ShowSimpleMessageBox
SDL_AddTimer
SDL_PollEvent
SDL_GetTicks
SDL_GetModState
SDL_StartTextInput
SDL_GetRelativeMouseMode
SDL_GetPerformanceFrequency
SDL_IsTextInputActive
SDL_StopTextInput
SDL_PushEvent
SDL_SetWindowSize
SDL_GL_DeleteContext
SDL_GL_MakeCurrent
SDL_SetWindowBrightness
SDL_Init
SDL_DestroyWindow
SDL_GetError
SDL_SetWindowBordered
SDL_Quit
SDL_ShowCursor
SDL_RemoveTimer
SDL_GL_GetProcAddress
SDL_GL_SetAttribute
SDL_SetWindowPosition
SDL_SetError
SDL_GameControllerGetAxis
SDL_GameControllerNameForIndex
SDL_GameControllerAddMappingsFromRW
SDL_RWFromFile
SDL_GameControllerOpen
SDL_IsGameController
SDL_GameControllerClose
SDL_NumJoysticks
SDL_GL_SwapWindow
SDL_LockMutex
SDL_CreateMutex
SDL_UnlockMutex
SDL_DestroyMutex
SDL_WaitThread
SDL_GetNumVideoDisplays
SDL_GetNumDisplayModes
SDL_GetDisplayMode
SDL_FillRect
SDL_GameControllerGetStringForButton
SDL_GetKeyFromScancode
SDL_GetKeyName
SDL_GL_CreateContext
SDL_GL_SetSwapInterval
SDL_CreateWindow
SDL_SetWindowFullscreen
SDL_WarpMouseInWindow
sdl2_net
SDLNet_Quit
SDLNet_GetError
SDLNet_Init
SDLNet_AddSocket
SDLNet_UDP_Recv
SDLNet_AllocPacket
SDLNet_ResolveHost
SDLNet_AllocSocketSet
SDLNet_UDP_Close
SDLNet_FreeSocketSet
SDLNet_TCP_Send
SDLNet_TCP_Close
SDLNet_ResolveIP
SDLNet_TCP_Accept
SDLNet_FreePacket
SDLNet_UDP_Send
SDLNet_UDP_Open
SDLNet_SetError
SDLNet_TCP_Recv
SDLNet_TCP_Open
sdl2_image
IMG_Init
IMG_Load
IMG_Quit
fmodex
FMOD_Channel_SetMode
FMOD_Channel_SetPaused
FMOD_Channel_Stop
FMOD_Channel_Get3DAttributes
FMOD_Sound_Release
FMOD_System_PlaySound
FMOD_ChannelGroup_Stop
FMOD_System_Create
FMOD_System_CreateChannelGroup
FMOD_System_Release
FMOD_System_Close
FMOD_System_Set3DSettings
FMOD_System_Init
FMOD_Channel_SetChannelGroup
FMOD_ChannelGroup_SetVolume
FMOD_Channel_IsPlaying
FMOD_System_CreateStream
FMOD_Channel_GetMode
FMOD_Channel_GetVolume
FMOD_ChannelGroup_GetNumChannels
FMOD_ChannelGroup_GetVolume
FMOD_System_Update
FMOD_System_CreateSound
FMOD_System_Set3DListenerAttributes
FMOD_Channel_Set3DAttributes
FMOD_Channel_GetCurrentSound
FMOD_ChannelGroup_GetChannel
FMOD_Channel_SetVolume
FMOD_Channel_GetAudibility
libpng12
png_set_IHDR
png_destroy_write_struct
png_get_io_ptr
png_set_bgr
png_create_write_struct
png_write_info
png_write_end
png_create_info_struct
png_set_write_fn
png_set_PLTE
png_write_image
sdl2_ttf
TTF_FontHeight
TTF_SetFontOutline
TTF_SizeUTF8
TTF_RenderUTF8_Blended
TTF_WasInit
TTF_CloseFont
TTF_SetFontHinting
TTF_OpenFont
TTF_SetFontKerning
TTF_Quit
TTF_Init
physfs
PHYSFS_getDirSeparator
PHYSFS_isInit
PHYSFS_freeList
PHYSFS_enumerateFiles
PHYSFS_setWriteDir
PHYSFS_getRealDir
PHYSFS_mkdir
PHYSFS_getLastErrorCode
PHYSFS_deinit
PHYSFS_init
PHYSFS_mount
PHYSFS_permitSymbolicLinks
PHYSFS_close
PHYSFS_unmount
PHYSFS_writeBytes
PHYSFS_openWrite
PHYSFS_getSearchPath
kernel32
DeleteCriticalSection
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCommandLineW
IsProcessorFeaturePresent
TerminateProcess
GetFullPathNameW
FindNextFileW
FindClose
GetCurrentProcess
GetCurrentThreadId
CopyFileA
CreateFileA
LoadLibraryA
CloseHandle
GetLocalTime
GetProcAddress
GetCurrentProcessId
SetUnhandledExceptionFilter
FindFirstFileExW
UnhandledExceptionFilter
user32
wsprintfA
msvcp140
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
_Query_perf_counter
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
_Query_perf_frequency
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
vcruntime140
memmove
__vcrt_InitializeCriticalSectionEx
__std_terminate
_CxxThrowException
_except_handler4_common
memset
memchr
memcpy
_setjmp3
strstr
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_controlfp_s
_register_thread_local_exe_atexit_callback
_errno
_c_exit
_exit
_configure_narrow_argv
strerror
_initterm_e
_initterm
_get_narrow_winmain_command_line
terminate
_initialize_narrow_environment
_set_errno
_set_app_type
exit
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_invalid_parameter_noinfo
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
calloc
_callnewh
_set_new_mode
api-ms-win-crt-string-l1-1-0
strcspn
strncat
strncmp
strncpy
_strdup
api-ms-win-crt-math-l1-1-0
_libm_sse2_pow_precise
_libm_sse2_cos_precise
round
__setusermatherr
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_CIatan2
_libm_sse2_tan_precise
fmin
floor
fmax
log2
_except1
ceil
_libm_sse2_atan_precise
api-ms-win-crt-convert-l1-1-0
mbstowcs_s
strtol
wcstombs_s
atoi
api-ms-win-crt-stdio-l1-1-0
fgetc
fseek
fflush
fgets
__acrt_iob_func
fputc
freopen
rewind
fwrite
fgetpos
setvbuf
__stdio_common_vfscanf
ungetc
feof
fread
fclose
fsetpos
__stdio_common_vsscanf
_fseeki64
fopen
_get_stream_buffer_pointers
__stdio_common_vsprintf
__p__commode
fputs
__stdio_common_vfprintf
_set_fmode
ftell
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_access
remove
_unlock_file
_stat64i32
api-ms-win-crt-time-l1-1-0
_time64
_localtime64
_mktime64
_difftime64
strftime
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 959KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ