Static task
static1
Behavioral task
behavioral1
Sample
DeSmuME-VS2019-x64-Release.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
DeSmuME-VS2019-x64-Release.exe
Resource
win10v2004-20220812-en
General
-
Target
DeSmuME-VS2019-x64-Release.exe
-
Size
6.3MB
-
MD5
d52e5a4bf49bc35d7d2bf308459f8c0f
-
SHA1
a67f638f10c0af7763380a249c9b364814032c25
-
SHA256
aef3e1f37a70fdffb649050defba3580e54c4a4bafe875f2617794596682843a
-
SHA512
7d40817b0c9cb3a1a14e92377a702cedba7944912670cdf290e48a524ec34a099a3c8ad31df001425e1d638f2f7e81a875ac1733aa60351f4b436375f4249153
-
SSDEEP
49152:qpSmcgWFTe7fJHx1a54TeA94krSZEcNe479RgN3P+uV7hrUXelXlw3Mowfwk8rwU:A8gGrUlXJwU7dbM5UdDOQoB6g9
Malware Config
Signatures
Files
-
DeSmuME-VS2019-x64-Release.exe.exe windows x64
cf0ea923867ea740e373eaf1b048139c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
avifil32
AVISaveOptions
AVIStreamWrite
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit
AVIFileRelease
AVIStreamSetFormat
AVIMakeCompressedStream
AVIStreamRelease
winmm
waveInReset
waveInClose
waveInOpen
waveInPrepareHeader
timeEndPeriod
timeBeginPeriod
waveInStart
timeGetTime
joyGetPosEx
joyGetDevCapsA
timeGetDevCaps
timeKillEvent
waveInAddBuffer
timeSetEvent
opengl32
glGetString
glGetIntegerv
glGetFloatv
glDrawBuffer
glReadBuffer
glTexImage1D
glBlendFunc
glEnableClientState
glColorPointer
glVertexPointer
glTexCoordPointer
glDisableClientState
glViewport
glDisable
glEnable
glStencilFunc
glStencilOp
glStencilMask
glDepthMask
glDrawArrays
glColorMask
glClear
glDepthFunc
glDrawElements
glCopyTexSubImage2D
glReadPixels
glTexSubImage1D
glAlphaFunc
glMatrixMode
glLoadIdentity
glClearStencil
glClearColor
glClearDepth
glCullFace
glTexEnvi
glScalef
glTexParameterf
glFinish
wglGetProcAddress
glOrtho
glScissor
glBegin
glGenTextures
glTexCoord2f
glVertex2i
glEnd
wglCreateContext
wglMakeCurrent
wglDeleteContext
wglGetCurrentContext
glTexSubImage2D
glTexParameteri
glBindTexture
glDeleteTextures
glTexImage2D
ws2_32
WSAGetLastError
listen
accept
WSAStartup
recv
__WSAFDIsSet
ntohs
recvfrom
select
sendto
closesocket
bind
send
htons
socket
WSACleanup
connect
inet_addr
setsockopt
htonl
user32
ReleaseCapture
IsDlgButtonChecked
SetFocus
CheckDlgButton
ShowWindow
GetWindowRect
DialogBoxParamW
IsWindowEnabled
SetCapture
CreateDialogParamW
DestroyWindow
LoadCursorA
GetSysColorBrush
RegisterClassExA
GetWindowLongA
wsprintfA
CallWindowProcA
SendMessageA
GetForegroundWindow
KillTimer
SetWindowLongA
DefWindowProcA
CheckRadioButton
SetTimer
GetClientRect
SetWindowLongPtrA
GetDesktopWindow
SetDlgItemTextA
EndPaint
FillRect
BeginPaint
InvalidateRect
PostMessageA
MessageBoxA
EnableWindow
DeleteMenu
ScreenToClient
GetCursorPos
GetKeyboardState
GetAsyncKeyState
GetKeyState
SetMenuItemInfoA
DrawMenuBar
DestroyMenu
CreatePopupMenu
GetMenuItemCount
InsertMenuItemA
GetMenuItemInfoA
SetWindowTextA
GetWindowTextA
SetWindowPos
SystemParametersInfoA
SetRect
MessageBoxW
DrawTextA
SetDlgItemTextW
GetWindowLongPtrA
LoadStringW
ShowCursor
GetDlgCtrlID
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
GetMessagePos
LoadMenuA
PostQuitMessage
SendDlgItemMessageA
SetRectEmpty
ClientToScreen
IsZoomed
IsIconic
CreateWindowExA
GetDC
ReleaseDC
RegisterClassExW
UnregisterClassW
CreateDialogParamA
AdjustWindowRect
LoadIconA
GetPropA
LoadAcceleratorsA
CreateMenu
RemoveMenu
FrameRect
GetScrollInfo
GetScrollPos
GetParent
GetDlgItemInt
SetScrollPos
SetScrollRange
SendInput
InsertMenuItemW
DialogBoxParamA
GetMenuStringW
GetMenuItemInfoW
GetDlgItemTextA
SetDlgItemInt
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
InsertMenuA
OffsetRect
DefWindowProcW
GetMenu
SetMenuItemInfoW
TrackMouseEvent
SetPropA
ModifyMenuA
TranslateAcceleratorA
IsDialogMessageA
PeekMessageA
MoveWindow
GetMonitorInfoA
MonitorFromWindow
GetFocus
RedrawWindow
DispatchMessageA
SetActiveWindow
GetActiveWindow
GetWindowTextLengthA
GetDlgItemTextW
GetDlgItem
SetWindowTextW
TranslateMessage
GetMessageA
UnregisterClassA
UpdateWindow
SetForegroundWindow
GetMenuBarInfo
GetSystemMetrics
AdjustWindowRectEx
EnableMenuItem
CheckMenuItem
SetMenu
LoadBitmapA
CreateWindowExW
GetSysColor
EndDialog
gdi32
SetTextAlign
SetBkMode
SelectObject
CreateCompatibleBitmap
SetTextColor
GetPixelFormat
TextOutA
ChoosePixelFormat
SetPixelFormat
SwapBuffers
CreatePen
MoveToEx
LineTo
StretchBlt
SetDCPenColor
SetDIBitsToDevice
CreateFontA
GetStockObject
SetBkColor
SetDIBits
GetDIBits
GetObjectA
GetTextExtentPoint32A
CreateSolidBrush
DeleteDC
DeleteObject
BitBlt
DescribePixelFormat
ExtTextOutA
CreateCompatibleDC
shell32
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetFolderPathW
SHGetMalloc
DragQueryFileW
ShellExecuteA
DragAcceptFiles
SHGetPathFromIDListA
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA
shlwapi
PathCompactPathW
SHDeleteKeyA
comctl32
ImageList_Create
ImageList_ReplaceIcon
ddraw
DirectDrawCreateEx
dinput8
DirectInput8Create
dsound
ord11
kernel32
WriteFile
ReadFile
CreateFileW
CreateFileA
CopyFileA
SetFileAttributesA
SignalObjectAndWait
ResetEvent
FreeConsole
FreeLibrary
GetProcAddress
LoadLibraryA
GetConsoleWindow
SetConsoleMode
GetConsoleMode
SetConsoleCtrlHandler
SetConsoleTitleW
GetCommandLineW
SetConsoleOutputCP
SetConsoleCP
GetACP
GetFileSize
GetFileType
GetStdHandle
FlushConsoleInputBuffer
PeekConsoleInputA
GetModuleHandleA
GetSystemTimeAsFileTime
VirtualFreeEx
VirtualAllocEx
GetCurrentProcess
MultiByteToWideChar
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesA
lstrcmpA
GetLastError
SetEvent
Sleep
CreateEventA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
WaitForSingleObject
CloseHandle
CreateThread
GetFileAttributesExA
FindClose
FindNextFileA
FindFirstFileA
GetSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
SystemTimeToFileTime
GetSystemTime
VirtualAlloc
VirtualFree
CreateSemaphoreA
ReleaseSemaphore
WideCharToMultiByte
WritePrivateProfileStringA
lstrlenA
FindFirstChangeNotificationA
FindCloseChangeNotification
ResumeThread
TerminateThread
SetProcessAffinityMask
GlobalAddAtomA
ExitProcess
SetFilePointer
GetTempPathA
GetModuleFileNameA
GetFullPathNameA
GetTickCount
SwitchToThread
GetTempPathW
SetCurrentDirectoryW
SetCurrentDirectoryA
OutputDebugStringW
OutputDebugStringA
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
AllocConsole
advapi32
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateInstance
CoInitializeEx
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1ios_base@std@@UEAA@XZ
??0ios_base@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
vcruntime140
__C_specific_handler
_purecall
strstr
strrchr
longjmp
__intrinsic_setjmp
__std_terminate
memcmp
strchr
memchr
memset
__std_exception_destroy
__std_exception_copy
_CxxThrowException
memmove
memcpy
__std_type_info_destroy_list
__current_exception_context
__current_exception
__CxxFrameHandler3
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
_fseeki64
__stdio_common_vfwprintf
setvbuf
_ftelli64
__stdio_common_vsprintf
_wfopen_s
fflush
fgets
__stdio_common_vswprintf
freopen
__stdio_common_vsscanf
fputc
__stdio_common_vswscanf
_lseeki64
_wopen
fgetc
fopen_s
__stdio_common_vfwprintf_s
__stdio_common_vswprintf_p
__stdio_common_vfprintf_s
fread
puts
fopen
fwrite
__stdio_common_vsnwprintf_s
fclose
__stdio_common_vfscanf
rewind
__stdio_common_vfwprintf_p
fseek
ftell
ferror
feof
fputs
__stdio_common_vfprintf
__stdio_common_vfwscanf
__acrt_iob_func
_set_fmode
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vfprintf_p
__stdio_common_vsprintf_s
__p__commode
_wfopen
_chsize
_open
_close
_lseek
_read
_write
_fileno
putchar
__stdio_common_vsprintf_p
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
exit
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_crt_atexit
_crt_at_quick_exit
_cexit
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_get_narrow_winmain_command_line
_initterm
_initterm_e
strerror
_errno
abort
_initialize_onexit_table
_exit
_c_exit
__p___argc
terminate
__p___argv
_beginthreadex
_register_thread_local_exe_atexit_callback
_execute_onexit_table
api-ms-win-crt-utility-l1-1-0
srand
rand
qsort
api-ms-win-crt-string-l1-1-0
strlen
isspace
_strdup
strncpy
strcpy
_wcsnicmp
wcscat
strcat_s
strcpy_s
_wcsdup
wcscpy
strcat
_strnicmp
towupper
toupper
strpbrk
towlower
strnlen
wcslen
isalpha
strncat
_stricmp
strncmp
tolower
strcmp
isalnum
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
malloc
_set_new_mode
free
realloc
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
_mktime64
clock
_localtime64
strftime
api-ms-win-crt-convert-l1-1-0
atol
_itoa
wcstombs
strtol
_itow
_ltoa
wcrtomb
strtoul
wctob
atoi
atof
mbsrtowcs
mbrtowc
api-ms-win-crt-math-l1-1-0
ldexp
sin
pow
__setusermatherr
atan2
sqrt
acos
ceil
floorf
floor
tan
log
fmod
roundf
cos
ceilf
exp
api-ms-win-crt-filesystem-l1-1-0
_fullpath
_chdir
_stat64i32
_unlink
_mkdir
_wstat64i32
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 377KB - Virtual size: 189.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ