Static task
static1
General
-
Target
Sonic Triple Trouble 16-Bit.exe
-
Size
40.3MB
-
MD5
1d9240d14102e4bd4c4498270c60e3d9
-
SHA1
8b7cfcf7f62f81d94ac98cfc6c40358c61c3fde2
-
SHA256
45a6707890ca5299f268b52f8c392ed1debc4b653d9e0a7bc278e787c1cf2cd1
-
SHA512
fb1e50d6f93e58cf2f52f323a260aa45ee7ca2fe1366b875f6b51c9f4d3fdf13bf9137354adf903faa9463dbf1496889ef87e3ea9c2b604d32c18be50922f2c8
-
SSDEEP
393216:9plgTc7yLMLMFnQveE231NL+nnSA/kSQ6XS:HucpCny2renSA/kSQ6X
Malware Config
Signatures
Files
-
Sonic Triple Trouble 16-Bit.exe.exe windows x64
05b51bd54b8eaa98f746375497776b88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wininet
InternetOpenA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetConnectA
HttpQueryInfoA
InternetGetConnectedState
InternetCrackUrlA
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
joyGetPosEx
joyGetPos
mciSendStringA
timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
ws2_32
WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
WSAGetLastError
listen
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
inet_ntoa
htonl
getaddrinfo
freeaddrinfo
getpeername
__WSAFDIsSet
getsockname
inet_ntop
ntohs
htons
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
SetStdHandle
ReadConsoleW
GetTimeZoneInformation
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
HeapWalk
HeapValidate
ReadFile
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetModuleHandleExW
RtlUnwind
LoadLibraryExW
RtlPcToFileHeader
RtlUnwindEx
GetProcessHeap
HeapFree
HeapAlloc
RaiseException
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
IsValidCodePage
OutputDebugStringA
GetCurrentProcess
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
CloseHandle
SetUnhandledExceptionFilter
GetLastError
SetErrorMode
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
GetProcAddress
LoadLibraryW
GetACP
CreateThread
GetExitCodeThread
LocalFree
FormatMessageW
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
GetConsoleWindow
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalUnlock
GlobalLock
GetFileAttributesA
VerSetConditionMask
VerifyVersionInfoW
ExitProcess
lstrlenA
WaitForSingleObjectEx
CreateEventExW
LoadLibraryA
DebugBreak
GetEnvironmentVariableA
GetSystemTimeAsFileTime
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetStringTypeW
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
HeapSize
SetLastError
WriteConsoleW
RtlLookupFunctionEntry
user32
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
CreateDialogParamW
SetClipboardData
CloseClipboard
OpenClipboard
LoadImageW
LoadCursorW
SetCursor
DialogBoxParamW
EndDialog
GetFocus
SetDlgItemTextW
GetDlgItemTextW
DrawTextW
SetWindowTextW
GetRawInputDeviceList
GetRawInputDeviceInfoA
SetDlgItemTextA
MapWindowPoints
ClientToScreen
MoveWindow
keybd_event
GetDlgItem
GetClientRect
SetForegroundWindow
ReleaseCapture
SetCapture
GetKeyState
BringWindowToTop
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
ReleaseDC
GetDC
GetMonitorInfoW
MonitorFromWindow
EnumDisplaySettingsW
SetWindowLongPtrW
GetCursorPos
SetCursorPos
AdjustWindowRectEx
GetWindowRect
UpdateWindow
GetSystemMetrics
SetWindowPos
ShowWindow
SendMessageW
GetActiveWindow
MessageBoxW
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
MessageBoxA
GetAsyncKeyState
ScreenToClient
gdi32
GetStockObject
GetDeviceCaps
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
SHGetFolderPathW
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateFreeThreadedMarshaler
dxgi
CreateDXGIFactory1
rpcrt4
UuidCreate
UuidToStringW
mf
MFCreateTopology
MFCreateTopologyNode
MFGetService
MFCreateAudioRendererActivate
MFCreateMediaSession
MFCreateSampleGrabberSinkActivate
mfplat
MFCreateMediaType
MFStartup
MFCreateSourceResolver
dwmapi
DwmGetCompositionTimingInfo
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 28.2MB - Virtual size: 28.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mydata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ