PPSSPPWindows64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PPSSPPWindows64.exe
Size

14.6MB
MD5

ea83b2c4be2f60d93a6e2ec4f4b31395
SHA1

8f64f9b27249bfbf888a73edbc2abc5289313e28
SHA256

14fc01dd148cff343b42e96ff5a931cac12687545ff8e6cce112cf2adab805cb
SHA512

fc7e797cb6cd2e24a4cb18c4b7835bc8635e11a7ac7256ac3ec4dcc5047018ff3c46eb19068706d280c540ca87203b28edd3ec7164d171f1496095062b19c0a7
SSDEEP

393216:RCUb51sIG00drz/VPZ14XHJHQA+JS+9ax9184F7:RgZMqIP841

Score

1^/10

Malware Config

Signatures

Files

PPSSPPWindows64.exe
.exe windows x64

11e9e6b0a77786b9d02f126baca504d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfplat

MFShutdown
MFCreateAttributes
MFStartup

shlwapi

ord219

winmm

timeBeginPeriod
timeEndPeriod

dsound

ord11

comctl32

ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

d3d9

Direct3DCreate9

opengl32

glReadPixels
glReadBuffer
glLogicOp
glGetTexLevelParameteriv
glGetTexImage
glGetFloatv
glFrontFace
glDepthRange
glDepthMask
glDepthFunc
glCullFace
glColorMask
glClearStencil
glClearDepth
glStencilFunc
glStencilMask
glTexSubImage2D
glTexParameterf
glGetError
glGetIntegerv
glGetString
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glGenTextures
glPixelStorei
glScissor
glTexImage2D
glStencilOp
glTexParameteri
glViewport
glDrawArrays

kernel32

SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
OutputDebugStringA
GetConsoleWindow
GetCommandLineW
GetTempPathW
GetExitCodeProcess
GlobalUnlock
GlobalLock
LocalFree
GetLocaleInfoW
GetCurrentDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CreateFileW
CloseHandle
GlobalAddAtomW
CopyFileW
GetProcessAffinityMask
CreateSemaphoreA
GetModuleHandleA
CreateEventA
ReleaseSemaphore
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
FlushFileBuffers
HeapQueryInformation
HeapSize
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
DuplicateHandle
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
IsDebuggerPresent
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTickCount
RtlUnwind
SetLastError
DeleteCriticalSection
RtlUnwindEx
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SleepConditionVariableCS
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
GetLastError
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
AreFileApisANSI
LeaveCriticalSection
EnterCriticalSection
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
MapViewOfFileEx
GetDiskFreeSpaceExW
MulDiv
GetTempFileNameW
lstrlenW
WaitNamedPipeW
FindFirstFileW
InitializeCriticalSection
GetFileInformationByHandle
CreateDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileTime
GetFileSizeEx
GetFileType
GetFileAttributesW
SetFileAttributesW
MoveFileExW
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
GetSystemTimeAsFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
ReleaseMutex
SetThreadExecutionState
GetLogicalProcessorInformation
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
GetLogicalDriveStringsW
FindNextFileW
MultiByteToWideChar
LoadLibraryExW
FindFirstFileExW
FindClose
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
DeleteFileW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetConsoleOutputCP
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
OutputDebugStringW

user32

GetWindowTextA
SetWindowTextA
MessageBoxA
EnableWindow
DialogBoxParamW
GetWindowTextW
EndDialog
GetDlgItem
FillRect
GetSystemMenu
SendMessageW
MessageBoxW
GetClientRect
SetWindowTextW
DrawTextExW
DefWindowProcW
GetAsyncKeyState
RegisterClipboardFormatA
SetClipboardData
TranslateAcceleratorW
LoadAcceleratorsW
GetClipboardData
DispatchMessageW
TranslateMessage
GetMessageW
GetKeyboardLayout
SetWindowPos
ReleaseDC
LoadImageW
ClipCursor
ShowCursor
AdjustWindowRect
SetMenuInfo
GetSystemMetrics
IsIconic
GetWindowPlacement
ShowOwnedPopups
GetDoubleClickTime
PostQuitMessage
GetMessageExtraInfo
SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
GetDC
TrackMouseEvent
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
DrawIconEx
DestroyIcon
LoadIconW
LoadCursorW
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
GetSysColorBrush
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW

gdi32

GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
GetTextExtentPoint32W
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GetTextMetricsW
AddFontResourceExW
GetTextFaceW
SetMapMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
DragQueryFileW
DragAcceptFiles
CommandLineToArgvW
ShellExecuteExW
SHOpenFolderAndSelectItems
SHParseDisplayName
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitializeEx
PropVariantClear

oleaut32

SysFreeString
SysAllocString
VariantInit

ws2_32

shutdown
gethostname
socket
ioctlsocket
WSACleanup
getaddrinfo
freeaddrinfo
inet_ntop
setsockopt
getsockopt
WSAIoctl
inet_pton
WSAAddressToStringW
WSAStartup
__WSAFDIsSet
htonl
getnameinfo
inet_addr
ntohl
htons
select
WSAGetLastError
accept
closesocket
connect
getpeername
getsockname
listen
ntohs
recv
recvfrom
send
sendto
bind

dinput8

DirectInput8Create

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueW

advapi32

RegSetValueExW
CryptAcquireContextA
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11e9e6b0a77786b9d02f126baca504d5

Headers

DLL Characteristics

File Characteristics

Imports

mfplat

shlwapi

winmm

dsound

comctl32

d3d9

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 10.9MB - Virtual size: 10.9MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 279KB - Virtual size: 3.5MB

.pdata Size: 373KB - Virtual size: 372KB

.rodata Size: 3KB - Virtual size: 3KB

_RDATA Size: 197KB - Virtual size: 197KB

.rsrc Size: 132KB - Virtual size: 131KB

.reloc Size: 79KB - Virtual size: 78KB

.text
Size: 10.9MB - Virtual size: 10.9MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 279KB - Virtual size: 3.5MB

.pdata
Size: 373KB - Virtual size: 372KB

.rodata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 197KB - Virtual size: 197KB

.rsrc
Size: 132KB - Virtual size: 131KB

.reloc
Size: 79KB - Virtual size: 78KB