snes9x[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

snes9x.exe
Size

3.1MB
MD5

f7a21f9840c86e3f877bce77b5463e4c
SHA1

242d7d811689959a81c958ed96adb63508479677
SHA256

27337df942836abc7afb29ae26ca3ac7e7e83c04a176f114b0162a55841b9dfa
SHA512

662a84432e529adc8af6da8a6cd271f7cb01207b06cd25ad90817c728a789fa83d23b16404fbf355371bceed827d43037468e6454ac1b7ca9c1ea3b30e07a9fd
SSDEEP

98304:Lz8ufAw67NonfKHznlm7nEbPYhNTvsKGilWU87DIK074UelsRMJ:xNTsQY7DIK074USsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
snes9x.exe

Files

snes9x.exe
.exe windows x86

64f61093e055e6dd2f7f6f3a06bd9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_Add

winmm

timeEndPeriod
joyGetPosEx
joyGetDevCapsW
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeKillEvent
timeGetTime

opengl32

glFlush
wglGetProcAddress
glEnable
glTexCoordPointer
glVertexPointer
glViewport
glMatrixMode
glTexParameteri
glGenTextures
glDrawArrays
glGetString
glTexImage2D
glBindTexture
glPixelStorei
glOrtho
glTexSubImage2D
glClearColor
wglDeleteContext
wglMakeCurrent
glClear
glEnableClientState
wglCreateContext
glDeleteTextures
glLoadIdentity

wsock32

ioctlsocket
WSAStartup
connect
accept
listen
select
bind
setsockopt
htonl
inet_addr
gethostname
WSAGetLastError
send
gethostbyname
closesocket
__WSAFDIsSet
socket
recv
gethostbyaddr
htons

ddraw

DirectDrawCreate

dsound

ord1

avifil32

AVIMakeCompressedStream
AVIFileRelease
AVIStreamWrite
AVIStreamSetFormat
AVIFileCreateStreamW
AVISaveOptions
AVIStreamRelease
AVIFileExit
AVIFileOpenW
AVIFileInit

kernel32

HeapSize
VirtualAlloc
VirtualFree
HeapCreate
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
FlushFileBuffers
GetCurrentProcessId
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
WaitForSingleObject
Sleep
ReleaseSemaphore
ResetEvent
CreateSemaphoreW
CreateEventW
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
GetUserDefaultLCID
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
lstrcpyW
GetModuleHandleW
lstrlenW
CreateFileA
CreateMutexW
MoveFileExA
CopyFileA
ReleaseMutex
InitializeCriticalSection
GetModuleFileNameW
SetCurrentDirectoryW
DeleteCriticalSection
GetFileSize
FindFirstFileW
GetDriveTypeW
SetErrorMode
QueryPerformanceCounter
SetEvent
GetLogicalDrives
lstrcmpW
GetCurrentDirectoryW
GetProcAddress
FindClose
lstrcatW
FindNextFileW
QueryPerformanceFrequency
SetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
GetTickCount
lstrcmpiW
FreeLibrary
LoadLibraryW
GetTimeZoneInformation
GetCPInfo
LCMapStringW
LCMapStringA
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetFullPathNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
GetFileAttributesA
DeleteFileW
ExitProcess
CreateThread
ResumeThread
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InterlockedExchange
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetLocaleInfoW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
CloseHandle

user32

GetMessageW
SetActiveWindow
GetWindowRect
ScreenToClient
TranslateAcceleratorW
SetCursor
DestroyWindow
ClientToScreen
OffsetRect
EnumDisplaySettingsW
ChangeDisplaySettingsW
EnumDisplayDevicesW
EnableWindow
GetDlgCtrlID
PostQuitMessage
SetMenuItemInfoW
SetDlgItemTextA
ValidateRect
CallWindowProcW
CheckMenuItem
DispatchMessageW
SetWindowPlacement
GetMenu
GetWindowPlacement
MonitorFromWindow
SetWindowPos
SetMenu
GetParent
MessageBoxW
SendDlgItemMessageA
LoadImageW
UnregisterClassW
GetSubMenu
GetDlgItemTextA
DialogBoxParamW
SendMessageA
InsertMenuItemW
GetDC
TranslateMessage
LoadAcceleratorsW
LoadIconW
SetCursorPos
LoadMenuW
PeekMessageW
ReleaseDC
GetDlgItem
EndDialog
SetDlgItemTextW
RedrawWindow
GetMonitorInfoW
DestroyAcceleratorTable
GetKeyState
MessageBoxA
DestroyCursor
GetActiveWindow
GetSystemMetrics
EndPaint
SetTimer
LoadCursorW
IsWindowEnabled
GetClientRect
SetFocus
BeginPaint
RegisterClassExW
GetAsyncKeyState
InvalidateRect
GetWindowLongW
GetWindowTextW
SetWindowLongW
GetSysColor
GetSysColorBrush
CreateWindowExW
SendMessageW
UpdateWindow
SetWindowTextW
DefWindowProcW
PostMessageW
SendDlgItemMessageW
GetCursorPos
CheckDlgButton
GetCaretPos
ShowWindow
IsDlgButtonChecked
CreateDialogParamW
GetMenuItemCount
RemoveMenu
AdjustWindowRectEx
GetDlgItemTextW
DrawMenuBar
MapWindowPoints

gdi32

DeleteObject
SetPixelFormat
SetBkColor
SelectObject
ExtTextOutW
SetTextColor
SwapBuffers
ChoosePixelFormat
GetStockObject
GetTextExtentPoint32W

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW

shell32

DragQueryFileW
SHGetPathFromIDListW
DragAcceptFiles
SHGetMalloc
SHBrowseForFolderW
DragFinish

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

SysAllocString
SysFreeString

d3d9

Direct3DCreate9

d3dx9_38

D3DXMatrixMultiply
D3DXMatrixTranspose
D3DXCreateEffect
D3DXMatrixOrthoOffCenterLH
D3DXCreateTextureFromFileW

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64f61093e055e6dd2f7f6f3a06bd9c93

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

winmm

opengl32

wsock32

ddraw

dsound

avifil32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

d3d9

d3dx9_38

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 217KB - Virtual size: 217KB

.data Size: 81KB - Virtual size: 2.6MB

.rsrc Size: 73KB - Virtual size: 72KB

.reloc Size: 255KB - Virtual size: 254KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 217KB - Virtual size: 217KB

.data
Size: 81KB - Virtual size: 2.6MB

.rsrc
Size: 73KB - Virtual size: 72KB

.reloc
Size: 255KB - Virtual size: 254KB