Static task
static1
General
-
Target
nestopia.exe
-
Size
2.0MB
-
MD5
97ad56a44b4b6c81ec4895e080a44716
-
SHA1
e571a428bef389910cf3f10191b44700b8855d5f
-
SHA256
7699722451022d473ef4f0ff84f80165c2da15918b20056a023d87e3a6240f61
-
SHA512
7ca76849fcd5e585896f0aa43f27dafdd313f00c6fe196375397b8a272007f8a4bc92679a99a12fa3e2027242a973e26649bd6995af65103b17f96cd4257a3c7
-
SSDEEP
24576:3/x7R+TZkRWyWYbVd5DQBkGbR+KRiMVJcM44sj3gr7gjDs1zWTVZu2bMzwzH7bCr:CTiR0YbvhQZTJcMmkgc1zWTGNzwcF
Malware Config
Signatures
Files
-
nestopia.exe.exe windows x86
e2ecc1d8e24a9bfcd100f1a2f85dc5a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetACP
GetOEMCP
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RaiseException
InterlockedExchange
LoadLibraryA
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateThread
ResumeThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
HeapFree
GetUserDefaultLangID
VirtualQuery
UnmapViewOfFile
OutputDebugStringA
IsProcessorFeaturePresent
CompareStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
FileTimeToSystemTime
GetCommandLineW
SystemTimeToTzSpecificLocalTime
SetEvent
GetSystemInfo
LockResource
SizeofResource
LoadResource
GlobalUnlock
GlobalLock
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
GetFileSize
CloseHandle
FlushFileBuffers
WaitForSingleObject
SetThreadPriority
GetCurrentThread
GetTickCount
FindClose
GetLastError
FreeLibrary
GetCurrentThreadId
Sleep
user32
GetWindow
GetSubMenu
GetClientRect
GetTopWindow
ReleaseDC
GetDC
CallNextHookEx
GetAsyncKeyState
SetCursor
GetDlgItem
GetDlgCtrlID
GetMenuBarInfo
DeleteMenu
CheckMenuItem
GetMenu
CheckMenuRadioItem
EnableMenuItem
GetMenuState
SetMenu
ShowScrollBar
DrawMenuBar
DestroyAcceleratorTable
SetMenuInfo
GetMenuItemCount
TranslateMessage
GetForegroundWindow
IsChild
InvalidateRect
SendInput
DestroyMenu
DestroyCursor
CloseClipboard
OpenClipboard
GetSysColorBrush
EnumThreadWindows
GetCursorPos
GetKeyState
AdjustWindowRectEx
UnhookWindowsHookEx
GetActiveWindow
LockWindowUpdate
ShowWindow
IsWindowEnabled
PostQuitMessage
SetTimer
KillTimer
GetWindowRect
EndDialog
DestroyWindow
ClientToScreen
GetWindowPlacement
GetWindowTextLengthA
SetFocus
GetParent
GetWindowThreadProcessId
SetWindowPos
SetWindowPlacement
ScreenToClient
GetSystemMetrics
IsWindowVisible
IsIconic
SetWindowTextA
IsZoomed
SetForegroundWindow
ValidateRect
GetFocus
GetWindowTextA
gdi32
SetDIBitsToDevice
Rectangle
SelectObject
GetDeviceCaps
CreateSolidBrush
CreatePen
GetObjectA
GetTextMetricsA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
GetCharacterPlacementA
SetTextColor
SetBkColor
SetBkMode
GetFontLanguageInfo
CreateFontIndirectA
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
DeleteObject
GetStockObject
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
DragQueryPoint
SHGetMalloc
DragFinish
ole32
CoInitializeEx
CoUninitialize
oleaut32
VariantClear
comctl32
ImageList_Destroy
InitCommonControlsEx
ImageList_Create
ImageList_AddMasked
avifil32
AVIFileExit
AVIStreamWrite
AVIFileRelease
AVIStreamRelease
AVIFileInit
AVIFileCreateStreamW
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileOpenW
msvfw32
ICCompressorChoose
ICCompressorFree
shlwapi
StrStrIW
StrTrimW
StrCmpW
StrIsIntlEqualW
PathCompactPathExW
SHDeleteKeyW
StrStrW
winmm
mmioSeek
timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
mmioDescend
mmioSetInfo
mmioAscend
mmioAdvance
mmioClose
mmioCreateChunk
mmioWrite
mmioRead
mmioGetInfo
d3d9
Direct3DCreate9
dinput8
DirectInput8Create
dsound
ord11
ord3
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 245KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ