mugen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mugen.exe
Size

1.0MB
MD5

529eff3c02920b389e3c3ddf74c825f4
SHA1

0d9edf8e7524fdff00a6a65fe50f16f98be7d621
SHA256

d5508f77f2a86f12358e669f91c64ba5e4a789d4b71262e8a758814384303a4e
SHA512

a117be230b75955c6dd1899e039d324258f680efa9235a592a32fcded6a0df83120895ff22d53a1b189e36bc5db596d44a278a8612ae84d85416b04b012c41f7
SSDEEP

24576:pn21yKw6kTPj9lxDeEEFjszowWz3zu4K90HTd2AfvtVoh6JP:WueXbKmP

Score

1^/10

Malware Config

Signatures

Files

mugen.exe
.exe windows x86

cd1e3c6d1589d2e5aadb0d2555dca0b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libresample

resample_open
resample_deinit
resample_process
resample_init
resample_close
resample_reset

pthreadvc2

pthread_cond_signal
pthread_mutex_init
pthread_attr_destroy
pthread_attr_setschedparam
pthread_cond_wait
pthread_mutex_lock
pthread_attr_init
pthread_cond_destroy
pthread_mutex_unlock
pthread_join
pthread_create
pthread_cond_init
pthread_mutex_destroy

sdl

SDL_strlcat
SDL_getenv
SDL_strlcpy
SDL_SetModuleHandle
SDL_UpperBlit
SDL_CreateRGBSurface
SDL_FreeSurface
SDL_WM_SetCaption
SDL_EnableKeyRepeat
SDL_SetVideoMode
SDL_GL_SwapBuffers
SDL_ShowCursor
SDL_putenv
SDL_SetAlpha
SDL_GL_SetAttribute
SDL_MapRGB
SDL_Flip
SDL_FreeRW
SDL_RWFromMem
SDL_RWFromFP
SDL_GetKeyState
SDL_AudioDriverName
SDL_AllocRW
SDL_PollEvent
SDL_UpdateRect
SDL_SetClipRect
SDL_GetWMInfo
SDL_GetModState
SDL_EnableUNICODE
SDL_GetError
SDL_Init
SDL_Quit
SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickEventState
SDL_GetKeyName
SDL_JoystickClose
SDL_NumJoysticks
SDL_JoystickNumHats
SDL_JoystickOpened
SDL_JoystickOpen
SDL_FillRect
SDL_LockAudio
SDL_UnlockAudio

sdl_mixer

Mix_Volume
Mix_LoadWAV_RW
Mix_SetPanning
Mix_Playing
Mix_QuickLoad_RAW
Mix_HaltChannel
Mix_PlayChannelTimed
Mix_AllocateChannels
Mix_CloseAudio
Mix_OpenAudio
Mix_HookMusic
Mix_FreeChunk
Mix_LoadMUS_RW
Mix_VolumeMusic
Mix_PausedMusic
Mix_RewindMusic
Mix_HaltMusic
Mix_HookMusicFinished
Mix_PlayMusic
Mix_FreeMusic
Mix_SetMusicPosition
Mix_PauseMusic
Mix_PlayingMusic
Mix_QuerySpecEx
Mix_ResumeMusic

sdl_ttf

TTF_RenderUTF8_Solid
TTF_RenderUTF8_Blended
TTF_OpenFont
TTF_CloseFont
TTF_Init
TTF_FontAscent
TTF_SizeUTF8
TTF_Quit

sdl_gfx

zoomSurface

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

zlib1

crc32
inflateInit2_
inflate
inflateEnd
inflateInit_
deflate
deflateEnd
inflateReset
deflateInit2_
deflateReset

opengl32

glColor3f
glLogicOp
glLoadIdentity
glHint
glFrustum
glTranslatef
glScalef
glBlendFunc
glRotatef
glMultMatrixf
glReadBuffer
glReadPixels
glTranslated
glGetString
glGetError
glScissor
glScaled
glOrtho
glVertex2f
glGetIntegerv
glGenTextures
glFlush
glEnable
glTexImage1D
glTexEnvf
glVertex3f
glTexParameteri
glBegin
glTexImage2D
glBindTexture
glEnd
glPixelStorei
glTexCoord2f
glTexSubImage2D
glDeleteTextures
glDisable
glViewport
glMatrixMode
glClearColor
glClear
glClearDepth
wglGetProcAddress
wglGetCurrentDC

glu32

gluOrtho2D

kernel32

VirtualFree
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcAddress
GetTickCount
QueryPerformanceFrequency
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
GetModuleHandleA
LoadLibraryA
GetCurrentThreadId
QueryPerformanceCounter
InterlockedExchangeAdd
GetModuleFileNameA
FormatMessageA
GetLastError
SetUnhandledExceptionFilter
FreeLibrary
GetLocaleInfoA

user32

GetDlgItemTextA
GetSystemMetrics
EndDialog
GetDlgItem
DialogBoxParamA
SendMessageA
GetClientRect
SetClassLongA
LoadIconA
SetWindowPos
MonitorFromWindow
GetWindowLongA
SetWindowLongA
GetMonitorInfoA
GetWindowRect
MoveWindow
CreateWindowExA

gdi32

CreateSolidBrush

shell32

SHGetFolderPathA

msvcr90

fscanf
tmpfile
_popen
_pclose
setlocale
strftime
clock
getenv
tmpnam
rename
system
_mktime64
_localtime64
_difftime64
memchr
islower
ispunct
isupper
isxdigit
_HUGE
rand
ldexp
frexp
_CIexp
_CIlog10
_CIlog
_CIsqrt
modf
_CIfmod
_CIatan2
_CIatan
_CIacos
_CIasin
_CItanh
_CItan
_CIcosh
_CIcos
_CIsinh
_CIsin
fputs
floor
_CIpow
strcoll
strcspn
strtoul
freopen
ungetc
_errno
strerror
pow
fabs
longjmp
strlen
_gmtime64
memcmp
memcpy
clearerr
_setjmp3
abort
iscntrl
strpbrk
strrchr
strstr
fflush
vsprintf
ferror
fgets
fgetc
feof
getc
fseek
ftell
toupper
tolower
isspace
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
exit
printf
fclose
fopen
strncpy
atoi
calloc
_stricmp
realloc
_isnan
isalnum
strtol
sprintf
strtod
free
fprintf
_vsnprintf
setvbuf
localeconv
vfprintf
sscanf
strncat
remove
srand
_getcwd
_time64
malloc
strchr
atof
memmove
strtok
isdigit
fread
fwrite
strncmp
_strlwr
ceil
isalpha
_amsg_exit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__iob_func
_snprintf
setbuf
__getmainargs
_cexit
_exit
memset
_XcptFilter
_chdir

Sections

.text
Size: 882KB - Virtual size: 882KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd1e3c6d1589d2e5aadb0d2555dca0b4

Headers

DLL Characteristics

File Characteristics

Imports

libresample

pthreadvc2

sdl

sdl_mixer

sdl_ttf

sdl_gfx

winmm

zlib1

opengl32

glu32

kernel32

user32

gdi32

shell32

msvcr90

Sections

.text Size: 882KB - Virtual size: 882KB

.rdata Size: 134KB - Virtual size: 133KB

.data Size: 4KB - Virtual size: 21KB

.rsrc Size: 45KB - Virtual size: 45KB

.text
Size: 882KB - Virtual size: 882KB

.rdata
Size: 134KB - Virtual size: 133KB

.data
Size: 4KB - Virtual size: 21KB

.rsrc
Size: 45KB - Virtual size: 45KB