Static task
static1
Behavioral task
behavioral1
Sample
SeriousSam.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SeriousSam.exe
Resource
win10v2004-20220812-en
General
-
Target
SeriousSam.exe
-
Size
432KB
-
MD5
434c9fa037c82faa82827b16fdf70040
-
SHA1
556971295dc772bdee6c98cfd40d1337c0bf80ca
-
SHA256
10b72bb7a246c51f22069d775f1f9238a9c8e6e4f043af7d785359a7f4e292af
-
SHA512
24dbe0e4b6500cde48abb6790f5b3d31eb302c91c0817a3c874e44d7c17dabbba2aac2a9bde10dbbd19aec5175780345cb1376a527207dceaf390437e4e6ad38
-
SSDEEP
6144:0n3unmMDWGxtq3DUBUYXtViR1DH1c7BwqhcQC+Zl:0n3+8eLiRV1o0
Malware Config
Signatures
Files
-
SeriousSam.exe.exe windows x86
a2321ffa7a40f2758edb675b6820eec8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
CloseHandle
CreateFileA
LoadLibraryA
GetLastError
GetProcAddress
GetDriveTypeA
GetModuleFileNameA
Sleep
user32
DefWindowProcA
PostMessageA
LoadBitmapA
RegisterClassExA
LoadIconA
DestroyWindow
SetWindowPos
GetSystemMetrics
GetWindowRect
ShowWindow
SetWindowTextA
CreateWindowExA
BeginPaint
GetCursorPos
GetKeyState
IsIconic
MessageBoxA
PeekMessageA
MapVirtualKeyA
DispatchMessageA
TranslateMessage
UpdateWindow
InvalidateRect
RegisterClassA
LoadCursorA
ScreenToClient
FillRect
EndPaint
GetClientRect
gdi32
DeleteDC
DeleteObject
GetObjectA
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
engine
?FileDir@CTFileName@@QBE?AV1@XZ
?_fnmApplicationPath@@3VCTFileName@@A
?IsEmpty@CListHead@@QBEHXZ
?SetLocalPause@CNetworkLibrary@@QAEXH@Z
?DisableInput@CInput@@QAEXXZ
?EnableInput@CInput@@QAEXPAUHWND__@@@Z
?_pfdConsoleFont@@3PAVCFontData@@A
?TrimSpacesRight@CTString@@QAEJXZ
?SetDisplayMode@CGfxLibrary@@QAEHW4GfxAPIType@@JJJW4DisplayDepth@@@Z
?CreateWindowCanvas@CGfxLibrary@@QAEXPAXPAPAVCViewPort@@PAPAVCDrawPort@@@Z
?EnableStreamHandling@CTStream@@SAXXZ
?ExceptionFilter@CTStream@@SAHKPAU_EXCEPTION_POINTERS@@@Z
?ExceptionFatalError@CTStream@@SAXXZ
?DisableStreamHandling@CTStream@@SAXXZ
?IsPaused@CNetworkLibrary@@QAEHXZ
?TogglePause@CNetworkLibrary@@QAEXXZ
?ResetDisplayMode@CGfxLibrary@@QAEHW4GfxAPIType@@@Z
?Play_t@CSoundObject@@QAEXABVCTFileName@@J@Z
?PutTexture@CDrawPort@@QBEXPAVCTextureObject@@ABV?$AABBox@J$01@@1K@Z
?GameInactive@CNetworkLibrary@@QAEXXZ
?HasPrefix@CTString@@QBEHABV1@@Z
?IsGameFinished@CNetworkLibrary@@QAEHXZ
?SwapBuffers@CViewPort@@QAEXXZ
?IsDualHead@CDrawPort@@QAEHXZ
?DepthString@CDisplayMode@@QBE?AVCTString@@XZ
?DestroyWindowCanvas@CGfxLibrary@@QAEXPAVCViewPort@@@Z
?SE_EndEngine@@YAXXZ
?Benchmark@CGfxLibrary@@QAEXPAVCViewPort@@PAVCDrawPort@@@Z
?SE_InitEngine@@YAXVCTString@@@Z
?SE_LoadDefaultFonts@@YAXXZ
?InitTranslation@@YAXXZ
?AddTranslationTablesDir_t@@YAXABVCTFileName@@0@Z
?FinishTranslationTable@@YAXXZ
?InfoMessage@@YAXPBDZZ
?SetJoyPolling@CInput@@QAEXH@Z
?GetInput@CInput@@QAEXH@Z
?DrawLine@CDrawPort@@QBEXJJJJKK@Z
??0CTString@@QAE@PBD@Z
?MulColors@@YAKKK@Z
??0CTString@@QAE@ABV0@@Z
??BCTString@@QBEPBDXZ
??0CNetworkSession@@QAE@XZ
?ExpandFilePath@@YAJKABVCTFileName@@AAV1@@Z
?ThrowF_t@@YAXPADZZ
?IsDemoPlayFinished@CNetworkLibrary@@QAEHXZ
?_pSoundStock@@3PAVCStock_CSoundData@@A
?SetString@CShell@@QAEXABVCTString@@0@Z
?_strModExt@@3VCTString@@A
?StringDuplicate@@YAPADPBD@Z
?FreeMemory@@YAXPAX@Z
??1CTString@@QAE@XZ
?DeleteChar@CTString@@QAEXJ@Z
?Split@CTString@@QAEXJAAV1@0@Z
??YCTString@@QAEAAV0@ABV0@@Z
??0CTString@@QAA@JPBDZZ
?Translate@@YAPADPADJ@Z
??8CTString@@QBEHPBD@Z
?TrimSpacesLeft@CTString@@QAEJXZ
?_strLogFile@@3VCTString@@A
?ScanF@CTString@@QAAJPBDZZ
?_fnmCDPath@@3VCTFileName@@A
?_fnmMod@@3VCTFileName@@A
??HCTString@@QBE?AV0@ABV0@@Z
??H@YA?AVCTString@@PBDABV0@@Z
??9CTString@@QBEHPBD@Z
?GetLerpedCurrentTick@CTimer@@QBE?BMXZ
?_pTimer@@3PAVCTimer@@A
?PutTextC@CDrawPort@@QBEXABVCTString@@JJK@Z
??1CTFileName@@QAE@XZ
?CPrintF@@YAXPBDZZ
??1CTFileStream@@UAE@XZ
?Close@CTFileStream@@QAEXXZ
??0CTString@@QAE@XZ
?SetPos_t@CTStream@@QAEXJ@Z
?GetLine_t@CTStream@@QAEXAAVCTString@@D@Z
?AtEOF@CTStream@@QAEHXZ
?Open_t@CTFileStream@@QAEXABVCTFileName@@W4OpenMode@CTStream@@@Z
??0CTFileStream@@QAE@XZ
??1CDrawPort@@QAE@XZ
?Remove@CListNode@@QAEXXZ
?IsLinked@CListNode@@QBEHXZ
?SetFont@CDrawPort@@QAEXPAVCFontData@@@Z
?_pfdDisplayFont@@3PAVCFontData@@A
?Lock@CDrawPort@@QAEHXZ
?Unlock@CDrawPort@@QAEXXZ
?MakeWideScreen@CDrawPort@@QAEXPAV1@@Z
??0CDrawPort@@QAE@PAVCRaster@@@Z
?Clear@CListHead@@QAEXXZ
?Matches@CTString@@QBEHABV1@@Z
??1CListNode@@QAE@XZ
?DeclareSymbol@CShell@@QAEXABVCTString@@PAX@Z
?_pShell@@3PAVCShell@@A
?WarningMessage@@YAXPBDZZ
?AddTail@CListHead@@QAEXAAVCListNode@@@Z
?GetLine_t@CTStream@@QAEXPADJD@Z
?Execute@CShell@@QAEXABVCTString@@@Z
?PrintF@CTString@@QAAJPBDZZ
??8CTString@@QBEHABV0@@Z
?_pGfx@@3PAVCGfxLibrary@@A
?FileName@CTFileName@@QBE?AV1@XZ
?TranslateConst@@YAPBDPBDJ@Z
??5@YAAAVCTStream@@AAV0@AAVCTString@@@Z
?PeekID_t@CTStream@@QAE?AVCChunkID@@XZ
?ExpectID_t@CTStream@@QAEXABVCChunkID@@@Z
??4CTString@@QAEAAV0@PBD@Z
?Sort@CListHead@@QAEXP6AHPBX0@ZH@Z
?MakeDirList@@YAXAAV?$CDynamicStackArray@VCTFileName@@@@ABVCTFileName@@ABVCTString@@K@Z
?FileExists@@YAHABVCTFileName@@@Z
?NoExt@CTFileName@@QBE?AV1@XZ
?IsTailMarker@CListNode@@QBEHXZ
?AddHead@CListHead@@QAEXAAVCListNode@@@Z
?SE_UpdateWindowHandle@@YAXPAUHWND__@@@Z
?FatalError@@YAXPBDZZ
?GetSymbol@CShell@@QAEPAVCShellSymbol@@ABVCTString@@H@Z
?Count@CListHead@@QBEJXZ
??0CTextureObject@@QAE@XZ
??1CTextureObject@@QAE@XZ
??0CFontData@@QAE@XZ
??1CFontData@@UAE@XZ
??1CModelObject@@QAE@XZ
?Play@CSoundObject@@QAEXPAVCSoundData@@J@Z
?SetData_t@CTextureObject@@QAEXABVCTFileName@@@Z
?PlayAnim@CAnimObject@@QAEXJK@Z
?SetData_t@CModelObject@@QAEXABVCTFileName@@@Z
?AddAttachmentModel@CModelObject@@QAEPAVCAttachmentModelObject@@J@Z
?IsWideScreen@CDisplayMode@@QAEHXZ
?IsDualHead@CDisplayMode@@QAEHXZ
?SetData@CAnimObject@@QAEXPAVCAnimData@@@Z
?SetINDEX@CShell@@QAEXABVCTString@@J@Z
?IFeel_StopEffect@@YAXPAD@Z
?CON_DiscardLastLineTimes@@YAXXZ
?GetRealTimeTick@CTimer@@QBEMXZ
??0CTFileName@@QAE@XZ
??4CTString@@QAEAAV0@ABV0@@Z
??1CNetworkSession@@QAE@XZ
?GetValue@CShell@@QAE?AVCTString@@ABV2@@Z
?_pNetwork@@3PAVCNetworkLibrary@@A
??0CNetworkSession@@QAE@ABVCTString@@@Z
?GetINDEX@CShell@@QAEJABVCTString@@@Z
?StopDemoRec@CNetworkLibrary@@QAEXXZ
?GetFLOAT@CShell@@QAEMABVCTString@@@Z
?_pSound@@3PAVCSoundLibrary@@A
?snd_iFormat@@3JA
?SetFormat@CSoundLibrary@@QAE?AW4SoundFormat@1@W421@H@Z
?Force@CTextureData@@QAEXK@Z
??0CSoundObject@@QAE@XZ
?Obtain_t@CStock_CSoundData@@QAEPAVCSoundData@@ABVCTFileName@@@Z
?Copy@CNetworkSession@@QAEXABV1@@Z
?Load_t@CSerial@@QAEXVCTFileName@@@Z
??1CSoundObject@@QAE@XZ
?Release@CStock_CSoundData@@QAEXPAVCSoundData@@@Z
?_pInput@@3PAVCInput@@A
?SetLerp@CTimer@@QAEXM@Z
?SetCurrentTick@CTimer@@QAEXM@Z
?TickQuantum@CTimer@@2MB
??0CDrawPort@@QAE@PAV0@ABV?$AABBox@J$01@@@Z
?UpdateSounds@CSoundLibrary@@QAEXXZ
?PutTextCXY@CDrawPort@@QBEXABVCTString@@JJK@Z
?DrawBorder@CDrawPort@@QBEXJJJJKK@Z
?Fill@CDrawPort@@QBEXJJJJK@Z
?PutTexture@CDrawPort@@QBEXPAVCTextureObject@@ABV?$AABBox@J$01@@K@Z
?Fill@CDrawPort@@QBEXK@Z
?IsFullScreen@CDisplayMode@@QAEHXZ
??0CDisplayMode@@QAE@XZ
??0CDrawPort@@QAE@PAV0@H@Z
?IsRecordingDemo@CNetworkLibrary@@QAEHXZ
?OnlyFirstLine@CTString@@QAEXXZ
?LoadStringVar@@YAXABVCTFileName@@AAVCTString@@@Z
?GetHostName@CNetworkLibrary@@QAEXAAVCTString@@0@Z
?GetNameForPrinting@CPlayerCharacter@@QBE?BVCTString@@XZ
?RemovePrefix@CTString@@QAEHABV1@@Z
?SetData@CModelObject@@QAEXPAVCModelData@@@Z
?SetFLOAT@CShell@@QAEXABVCTString@@M@Z
?FileExistsForWriting@@YAHABVCTFileName@@@Z
?Load_t@CTString@@QAEXABVCTFileName@@@Z
??9CTString@@QBEHABV0@@Z
?FileExt@CTFileName@@QBE?AV1@XZ
?GetAxisTransName@CInput@@QBEABVCTString@@J@Z
?EnumDisplayModes@CGfxLibrary@@QAEPAVCDisplayMode@@AAJW4GfxAPIType@@J@Z
?EnumSessions@CNetworkLibrary@@QAEXH@Z
?SetValue@CShell@@QAEXABVCTString@@0@Z
?IFeel_PlayEffect@@YAXPAD@Z
?LerpColor@@YAKKKM@Z
?TrimLeft@CTString@@QAEJJ@Z
?TrimRight@CTString@@QAEJJ@Z
?Undecorated@CTString@@QBE?AV1@XZ
?PutText@CDrawPort@@QBEXABVCTString@@JJK@Z
?PutTextR@CDrawPort@@QBEXABVCTString@@JJK@Z
?GetTextWidth@CDrawPort@@QBEKABVCTString@@@Z
??0CModelObject@@QAE@XZ
??1CRenderModel@@QAE@XZ
?EndModelRenderingView@@YAXH@Z
?RenderShadow@CModelObject@@QAEXAAVCRenderModel@@ABVCPlacement3D@@MMMABV?$Plane@M$02@@@Z
?RenderModel@CModelObject@@QAEXAAVCRenderModel@@@Z
?SetupModelRendering@CModelObject@@QAEXAAVCRenderModel@@@Z
?SetObjectPlacement@CRenderModel@@QAEXABVCPlacement3D@@@Z
?BeginModelRenderingView@@YAXAAVCAnyProjection3D@@PAVCDrawPort@@@Z
??4CPerspectiveProjection3D@@QAEAAV0@ABV0@@Z
??_7CParallelProjection3D@@6B@
??_7CIsometricProjection3D@@6B@
??_7CSimpleProjection3D@@6B@
??0CProjection3D@@QAE@XZ
??0CPerspectiveProjection3D@@QAE@XZ
??0CRenderModel@@QAE@XZ
?FillZBuffer@CDrawPort@@QBEXM@Z
?GetData@CModelObject@@QAEPAVCModelData@@XZ
?InsertChar@CTString@@QAEXJD@Z
?LengthNaked@CTString@@QBEJXZ
?TimeToString@@YA?AVCTString@@M@Z
??1CAnimObject@@QAE@XZ
?Save_t@CTString@@QAEXABVCTFileName@@@Z
?RemoveFile@@YAHABVCTFileName@@@Z
?GetWindowsError@@YA?BVCTString@@K@Z
msvcrt
??2@YAPAXI@Z
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
_execl
_execv
fgets
fopen
fclose
isprint
_CIfmod
strncpy
sprintf
sscanf
_ftol
isspace
strchr
__CxxFrameHandler
??3@YAXPAX@Z
_stricmp
floor
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ