Static task
static1
Behavioral task
behavioral1
Sample
SuperMeatBoyForever.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SuperMeatBoyForever.exe
Resource
win10v2004-20220901-en
General
-
Target
SuperMeatBoyForever.exe
-
Size
7.1MB
-
MD5
e5ec4840d24939e0ab5b30ef45dc1518
-
SHA1
1ccd5742ed997388f98637533beb718015a60ae0
-
SHA256
62c09760e72d0d2125e0170bf18a48a2102cc6b48f20877e21b4d16d1fa94140
-
SHA512
e9a8aff2d87d4516f9ad9635f620049b4be26813a0ca6ff27fafbd88cea87b81fde8a7ec2c36e4fd3e8bd0f882556201d17d05191458b5e47d15c4037d8f02cd
-
SSDEEP
49152:/u12Cg3kYSc4ViqIa/myFef/fB0UIPJQ5712VgB0Zjjzt8iyc9BzQMwobcDIPRpe:3BBaXBvwRZqOYkVZz
Malware Config
Signatures
Files
-
SuperMeatBoyForever.exe.exe windows x64
1ea2ce0392001e401ef2c5b9e99582b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
FindWindowA
ClientToScreen
GetCursorPos
SetCursorPos
GetForegroundWindow
CreateWindowExW
DefWindowProcA
GetThreadDesktop
SetThreadDesktop
OpenInputDesktop
PeekMessageW
DispatchMessageW
TranslateMessage
EnumDisplaySettingsW
DestroyWindow
GetWindowRect
PostQuitMessage
ChangeDisplaySettingsW
UnregisterClassW
CloseWindowStation
CreateWindowStationW
LoadCursorW
ShowCursor
GetTouchInputInfo
RegisterClassExW
RegisterTouchWindow
GetCursorInfo
SetRect
BringWindowToTop
CreateWindowExA
SetWindowLongW
SetWindowPos
CloseTouchInputHandle
ShowWindow
AdjustWindowRectEx
GetSystemMetrics
UpdateWindow
DefWindowProcW
MessageBoxA
ole32
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoTaskMemFree
CoInitialize
oleaut32
SysFreeString
SysAllocString
dinput8
DirectInput8Create
xinput9_1_0
XInputGetState
d3d11
D3D11CreateDeviceAndSwapChain
D3D11CreateDevice
dxgi
CreateDXGIFactory
fmod
?createStream@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?playSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAVSound@2@PEAVChannelGroup@2@_NPEAPEAVChannel@2@@Z
?release@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setMode@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@I@Z
?stop@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?getVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAM@Z
?setLoopCount@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z
?createSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?getMasterSoundGroup@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAPEAVSoundGroup@2@@Z
?setCallback@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@P6A?AW43@PEAUFMOD_CHANNELCONTROL@@W4FMOD_CHANNELCONTROL_TYPE@@W4FMOD_CHANNELCONTROL_CALLBACK_TYPE@@PEAX3@Z@Z
?set3DAttributes@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_VECTOR@@0@Z
?set3DMinMaxDistance@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@MM@Z
?stop@SoundGroup@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
fmodstudio
?loadBankFile@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAPEAVBank@23@@Z
?stopAllEvents@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_STUDIO_STOP_MODE@@@Z
?getEvent@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAPEAVEventDescription@23@@Z
?createInstance@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVEventInstance@23@@Z
?getVolume@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAM0@Z
?setVolume@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?setVolume@VCA@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?getVolume@VCA@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAM0@Z
?setParameterByName@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDM_N@Z
?create@System@Studio@FMOD@@SA?AW4FMOD_RESULT@@PEAPEAV123@I@Z
?initialize@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HIIPEAX@Z
?release@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?update@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getCoreSystem@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAV13@@Z
?getBus@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAPEAVBus@23@@Z
?getVCA@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAPEAVVCA@23@@Z
?set3DAttributes@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_3D_ATTRIBUTES@@@Z
?release@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setCallback@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@P6A?AW44@IPEAUFMOD_STUDIO_EVENTINSTANCE@@PEAX@ZI@Z
?setPaused@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z
?setListenerAttributes@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HPEBUFMOD_3D_ATTRIBUTES@@@Z
?stop@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_STUDIO_STOP_MODE@@@Z
?start@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
shell32
SHGetKnownFolderPath
ShellExecuteA
ShellExecuteW
binkw64
BinkUtilMalloc
BinkRegisterFrameBuffers
BinkGetFrameBuffersInfo
BinkOpenXAudio2
BinkSetSoundSystem2
BinkUtilFree
BinkSetVolume
BinkClose
BinkWait
BinkNextFrame
BinkDoFrame
BinkOpen
BinkShouldSkip
BinkAllocateFrameBuffers
eossdk-win64-shipping
EOS_Achievements_AddNotifyAchievementsUnlockedV2
EOS_Achievements_UnlockAchievements
EOS_Logging_SetCallback
EOS_Platform_GetAchievementsInterface
EOS_Platform_GetConnectInterface
EOS_Platform_GetAuthInterface
EOS_Auth_Login
EOS_Connect_CreateUser
EOS_Connect_Login
EOS_Auth_Token_Release
EOS_Platform_Create
EOS_Initialize
EOS_Auth_CopyUserAuthToken
EOS_Platform_Tick
comdlg32
GetOpenFileNameA
vcomp120
_vcomp_fork
_vcomp_for_static_simple_init
_vcomp_for_static_end
kernel32
TryEnterCriticalSection
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
CreateThread
ResumeThread
SuspendThread
WaitForMultipleObjects
SetThreadPriority
WaitForSingleObject
DeleteFileA
CloseHandle
GetFileTime
FindNextFileA
CreateFileMappingW
MoveFileA
SetFileInformationByHandle
SetFilePointerEx
GetFileInformationByHandleEx
SetEndOfFile
SetEnvironmentVariableA
FindClose
CopyFileA
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetStdHandle
GetConsoleCP
FlushFileBuffers
HeapQueryInformation
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
FreeLibrary
LoadLibraryExW
OutputDebugStringW
SetConsoleCtrlHandler
HeapSize
WideCharToMultiByte
GetEnvironmentStringsW
EnterCriticalSection
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FatalAppExitA
GetCPInfo
GetSystemTimeAsFileTime
AreFileApisANSI
FindFirstFileA
DecodePointer
CreateDirectoryA
CreateFileW
GetProcAddress
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
HeapReAlloc
HeapAlloc
HeapFree
DeleteCriticalSection
CreateDirectoryW
GetFileAttributesW
DeleteFileW
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentThreadId
GetModuleHandleA
GetThreadTimes
GetCurrentThread
GetCurrentProcessId
InitOnceExecuteOnce
EncodePointer
FreeEnvironmentStringsW
ReadFile
GetCommandLineW
GetStringTypeW
MultiByteToWideChar
SetCurrentDirectoryW
GetModuleFileNameW
GetTempPathA
Sleep
OutputDebugStringA
CreateFileA
GetFileSize
SetFilePointer
MapViewOfFile
UnmapViewOfFile
WriteFile
FileTimeToSystemTime
advapi32
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 193KB - Virtual size: 21.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 961KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ