Static task
static1
Behavioral task
behavioral1
Sample
snes9x-x64.exe
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
snes9x-x64.exe
Resource
win10v2004-20230220-es
General
-
Target
snes9x-x64.exe
-
Size
9.5MB
-
MD5
c7329c54df38bf5d38975c6f37058596
-
SHA1
af158af4986567b25c9224bbccab07d52f83af54
-
SHA256
b9fe59605eb0773a0b50f4166e42984fe7a724fef949a43a86f4a7b722a550b7
-
SHA512
8db507dfd866596457c616d7a8ec017098f438c2a38357bad9b91a782aa5e9f4ffaf967a6e27b51f84a36ff6a9fc3cab702d37c647ccc24a4a7ab71926fd285e
-
SSDEEP
98304:oHECIcVMIJAybBtJeFw6ZL6WnEMJvxWPsDL6pB5x7xJ0uniMCD:yECIcV7JVBZW/dx6sDOtJ0uA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource snes9x-x64.exe
Files
-
snes9x-x64.exe.exe windows x64
b22888401553ec77de3067e5a104c367
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ImageList_Add
ImageList_Create
InitCommonControlsEx
winmm
waveOutRestart
waveOutClose
waveOutUnprepareHeader
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutSetVolume
waveOutReset
joyGetPosEx
joyGetDevCapsW
timeGetDevCaps
timeKillEvent
timeEndPeriod
timeSetEvent
timeBeginPeriod
waveOutWrite
waveOutOpen
waveOutPrepareHeader
timeGetTime
waveOutPause
opengl32
wglDeleteContext
wglGetProcAddress
wglCreateContext
wglMakeCurrent
wsock32
connect
gethostname
socket
send
ioctlsocket
recv
htons
WSAStartup
select
gethostbyname
closesocket
__WSAFDIsSet
setsockopt
htonl
inet_addr
gethostbyaddr
listen
bind
accept
WSAGetLastError
avifil32
AVIFileInit
AVIStreamSetFormat
AVIFileExit
AVIMakeCompressedStream
AVISaveOptions
AVIFileRelease
AVIFileOpenW
AVIStreamRelease
AVIFileCreateStreamW
AVIStreamWrite
shlwapi
PathFindFileNameW
PathFindExtensionW
PathIsRelativeW
kernel32
PeekNamedPipe
GetFileType
CreateDirectoryW
GetFileAttributesExW
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetTempPathW
FileTimeToSystemTime
DeleteFileW
SetFilePointerEx
GetModuleFileNameA
GetStdHandle
GetACP
SetEndOfFile
GetConsoleMode
ReadConsoleW
GetConsoleCP
HeapAlloc
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
ReleaseSemaphore
WaitForSingleObject
CreateEventW
Sleep
ResetEvent
CreateSemaphoreW
ReadFile
WriteFile
SetFilePointer
CreateFileW
GetLastError
CloseHandle
lstrcpynW
lstrcpyW
SetCurrentDirectoryW
lstrlenW
LoadLibraryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
lstrcmpiW
lstrcmpW
GetVersionExW
LocalAlloc
SetEvent
LocalFree
OutputDebugStringA
FormatMessageW
OutputDebugStringW
HeapFree
DebugBreak
GetModuleHandleA
GetModuleHandleW
WaitForMultipleObjects
GetSystemInfo
CreateThread
CreateMutexW
ReleaseMutex
CopyFileA
MoveFileExA
CreateFileA
GetFullPathNameW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
GetFileSize
GetLogicalDrives
FindFirstFileW
GetCommandLineW
FindNextFileW
SetErrorMode
FindClose
SetFileAttributesW
lstrcatW
QueryPerformanceFrequency
GetCurrentDirectoryW
QueryPerformanceCounter
GetDriveTypeW
MultiByteToWideChar
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
SetLastError
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetTimeZoneInformation
SetStdHandle
FlushFileBuffers
SystemTimeToTzSpecificLocalTime
HeapReAlloc
SetConsoleCtrlHandler
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
RtlUnwind
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleW
HeapSize
CreateMutexA
FormatMessageA
user32
GetActiveWindow
GetSubMenu
LoadAcceleratorsW
UnregisterClassW
ScreenToClient
GetMenuItemCount
SetActiveWindow
DestroyWindow
InsertMenuItemW
CallWindowProcW
LoadMenuW
AdjustWindowRectEx
GetMenuItemInfoW
CreateDialogParamW
GetMessageW
GetWindowLongW
ShowWindow
CheckDlgButton
PostQuitMessage
ReleaseCapture
LoadImageW
SetCursorPos
GetCursorPos
EnableWindow
GetMenu
GetWindowPlacement
GetMonitorInfoW
SetWindowPlacement
SetMenu
DrawMenuBar
GetKeyState
DestroyCursor
DestroyAcceleratorTable
GetSystemMetrics
DefWindowProcW
MapVirtualKeyW
RegisterClassExW
GetAsyncKeyState
SetTimer
RegisterDeviceNotificationW
GetDlgItemTextA
DispatchMessageW
RedrawWindow
GetDlgCtrlID
SetMenuItemInfoW
PeekMessageW
MapWindowPoints
ValidateRect
GetDlgItemTextW
MoveWindow
IsDlgButtonChecked
TranslateAcceleratorW
GetUpdateRect
TranslateMessage
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
IsWindowEnabled
SetFocus
LoadCursorW
GetSysColorBrush
UpdateWindow
InvalidateRect
BeginPaint
EndPaint
GetForegroundWindow
GetWindowRect
SetWindowPos
SetDlgItemTextW
SendDlgItemMessageW
LoadIconW
SetScrollInfo
SetWindowLongPtrW
CreateWindowExW
SendMessageW
EndDialog
SetWindowTextW
GetScrollInfo
GetWindowLongPtrW
GetDlgItem
SetScrollPos
ScrollWindow
GetParent
DialogBoxParamW
GetWindowTextW
GetDC
ChangeDisplaySettingsW
EnumDisplayDevicesW
EnumDisplaySettingsW
ReleaseDC
OffsetRect
ClientToScreen
GetClientRect
MessageBoxW
IsIconic
MessageBoxA
PostMessageW
wsprintfW
GetSysColor
RemoveMenu
MonitorFromWindow
gdi32
ExtTextOutW
SetBkColor
SetPixelFormat
SetTextColor
GetTextExtentPoint32W
CreateICW
GetDeviceCaps
GetTextMetricsW
DeleteDC
DeleteObject
CreateFontIndirectW
ChoosePixelFormat
SwapBuffers
GetStockObject
SelectObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
CommandLineToArgvW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish
DragAcceptFiles
DragQueryFileW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
d3d9
Direct3DCreate9
ddraw
DirectDrawCreate
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ