Static task
static1
Behavioral task
behavioral1
Sample
muramasa_en.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
muramasa_en.exe
Resource
win10v2004-20230703-en
General
-
Target
muramasa_en.exe
-
Size
2.3MB
-
MD5
97b147147e99bced011a3607fd60b60f
-
SHA1
5c759e187c2d8751f549db322a21b3b9736a7481
-
SHA256
5a174f7037f021ec22f228869b3d0e62ca143dcdc051597fe4a378c26ba0b4b9
-
SHA512
3f7e0f5afa970fbae09eefaea7156352917d5b322b6bad57bf3a41eb12f3fc1d204be9e0f811ae9fe0de1bfdeb0113618963f955f8c4b6999463fc8e4ef311e4
-
SSDEEP
49152:niz5JO9toKoOolB9ono1xJ+oqEXsgmayu/JoGop2UamkZz+lm:i/O9+SesQJJoGUnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource muramasa_en.exe
Files
-
muramasa_en.exe.exe windows x86
ee8c817d7d73ea75698f7bc7c2024745
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
user32
SetActiveWindow
SetWindowTextW
ShowCursor
MessageBoxW
GetActiveWindow
PostMessageA
SetCursor
LoadCursorA
PostQuitMessage
SetForegroundWindow
MessageBoxA
GetWindowRect
BeginPaint
EndPaint
CallWindowProcA
SendMessageA
LoadImageA
GetWindowLongA
DefWindowProcA
DialogBoxParamA
EndDialog
KillTimer
IsDlgButtonChecked
SetWindowLongA
SetDlgItemTextA
GetDlgItem
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
gdiplus
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipCloneImage
GdipCreateBitmapFromStream
GdiplusStartup
GdiplusShutdown
kernel32
SetEndOfFile
ReadConsoleW
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
MoveFileExW
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
DeleteFileW
GetTimeZoneInformation
GetTickCount
QueryPerformanceFrequency
MultiByteToWideChar
WaitForSingleObject
CreateMutexA
GetLastError
lstrlenW
WideCharToMultiByte
LocalFree
ReleaseMutex
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetTempPathW
GetCurrentDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CreateFileA
ReadFile
CreateEventA
SetFilePointerEx
InitializeCriticalSection
Sleep
DuplicateHandle
QueueUserWorkItem
TryEnterCriticalSection
CreateFileW
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
DecodePointer
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
OutputDebugStringW
GetStringTypeW
GetCurrentThread
HeapAlloc
HeapFree
FreeLibraryAndExitThread
ExitThread
CreateThread
GetACP
WriteFile
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetStdHandle
RtlUnwind
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
EncodePointer
FlushFileBuffers
mware
??0Vector2D@Mware@@QAE@XZ
??0Vector4D@Mware@@QAE@XZ
??0Vector3D@Mware@@QAE@ABVVector2D@1@@Z
??YVector2D@Mware@@QAEAAV01@ABV01@@Z
??DVector2D@Mware@@QBE?AV01@M@Z
??HVector3D@Mware@@QBE?AV01@M@Z
?Normalize@Vector3D@Mware@@QAEAAV12@XZ
?RotationZ@Matrix4x4@Mware@@QAEAAV12@ABM@Z
?Transform@Vector3D@Mware@@QAEAAV12@ABVMatrix4x4@2@@Z
?GetInt@CRandom@Mware@@QAEHHH@Z
??0Vector2D@Mware@@QAE@ABV01@@Z
??0CRandom@Mware@@QAE@H@Z
??1CRandom@Mware@@UAE@XZ
?Set@Vector2D@Mware@@QAEAAV12@MM@Z
??4Vector2D@Mware@@QAEAAV01@ABV01@@Z
??0Vector2D@Mware@@QAE@ABVVector3D@1@@Z
??_0Vector2D@Mware@@QAEAAV01@M@Z
??0Quaternion@Mware@@QAE@ABV01@@Z
?RotationAxis@Quaternion@Mware@@QAEAAV12@ABVVector3D@2@ABM@Z
??0Quaternion@Mware@@QAE@XZ
??1Quaternion@Mware@@QAE@XZ
??XQuaternion@Mware@@QAEAAV01@ABV01@@Z
?RotationQuaternion@Matrix4x4@Mware@@QAEAAV12@ABVQuaternion@2@@Z
?RotationZXY@Matrix4x4@Mware@@QAEAAV12@ABM00@Z
??HVector3D@Mware@@QBE?AV01@ABV01@@Z
?GetPosition@Matrix4x4@Mware@@QBE?AVVector3D@2@XZ
?Translation@Matrix4x4@Mware@@QAEAAV12@ABVVector3D@2@@Z
?LengthSq@Vector2D@Mware@@QBEMXZ
??0Vector4D@Mware@@QAE@ABVVector3D@1@@Z
?LookAt@Matrix4x4@Mware@@QAEAAV12@ABVVector4D@2@00@Z
?Ortho@Matrix4x4@Mware@@QAEAAV12@ABM000@Z
?Perspective@Matrix4x4@Mware@@QAEAAV12@ABM000@Z
??GVector3D@Mware@@QBE?AV01@XZ
??0Vector4D@Mware@@QAE@ABV01@@Z
??DVector2D@Mware@@QBE?AV01@ABV01@@Z
?Homographic2D@Matrix4x4@Mware@@QAEAAV12@PBVVector2D@2@0@Z
?Set@Vector4D@Mware@@QAEAAV12@MMMM@Z
?Transform@Vector4D@Mware@@QAEAAV12@ABVMatrix4x4@2@@Z
?Inverse@Matrix4x4@Mware@@QAEAAV12@XZ
?TransformCoord@Vector4D@Mware@@QAEAAV12@ABVMatrix4x4@2@@Z
??0CLine3D@Mware@@QAE@XZ
?Line_Plane@Collision@Mware@@YAHABVCLine3D@2@ABVCPlane@2@AAVVector3D@2@@Z
??4Vector3D@Mware@@QAEAAV01@M@Z
?Cross@Vector3D@Mware@@QAEAAV12@ABV12@0@Z
?GetFloat@CRandom@Mware@@QAEMMM@Z
??0CRandom@Mware@@QAE@XZ
?Seed@CRandom@Mware@@QAEXH@Z
??0Vector2D@Mware@@QAE@ABVVector4D@1@@Z
??0Vector3D@Mware@@QAE@ABVVector4D@1@@Z
?LengthSq@Vector3D@Mware@@QBEMXZ
??KVector3D@Mware@@QBE?AV01@M@Z
??HVector2D@Mware@@QBE?AV01@ABV01@@Z
??GVector2D@Mware@@QBE?AV01@ABV01@@Z
??KVector2D@Mware@@QBE?AV01@M@Z
?Hermite@Vector3D@Mware@@QAEAAV12@ABV12@000M@Z
?Lerp@Vector3D@Mware@@QAEAAV12@ABV12@0M@Z
??1CLine3D@Mware@@QAE@XZ
?Identity@Matrix4x4@Mware@@QAEXXZ
?SetPosition@Matrix4x4@Mware@@QAEXABVVector3D@2@@Z
?GetScale@Matrix4x4@Mware@@QBE?AV12@XZ
?GetFront@Matrix4x4@Mware@@QBE?AVVector4D@2@XZ
?GetUp@Matrix4x4@Mware@@QBE?AVVector4D@2@XZ
?GetRight@Matrix4x4@Mware@@QBE?AVVector4D@2@XZ
?RotationAxis@Matrix4x4@Mware@@QAEAAV12@ABMABVVector3D@2@@Z
?SetFront@Matrix4x4@Mware@@QAEXABVVector4D@2@@Z
?SetUp@Matrix4x4@Mware@@QAEXABVVector4D@2@@Z
?SetRight@Matrix4x4@Mware@@QAEXABVVector4D@2@@Z
?RotationX@Matrix4x4@Mware@@QAEAAV12@ABM@Z
?RotationY@Matrix4x4@Mware@@QAEAAV12@ABM@Z
??DVector3D@Mware@@QBE?AV01@ABV01@@Z
??DMatrix4x4@Mware@@QBE?AV01@M@Z
??YMatrix4x4@Mware@@QAEAAV01@ABV01@@Z
??0CBoxAABB@Mware@@QAE@XZ
?RotationAxis@Vector3D@Mware@@QAEAAV12@ABMABV12@@Z
?LookAt@Matrix4x4@Mware@@QAEAAV12@ABVVector3D@2@00@Z
?Inverse@Matrix4x4@Mware@@QAEAAV12@ABV12@@Z
?TransformNormal@Vector3D@Mware@@QAEAAV12@ABVMatrix4x4@2@@Z
?FromPoint@CPlane@Mware@@QAEXABVVector3D@2@00@Z
??1CBoxAABB@Mware@@QAE@XZ
?Reflect@Vector3D@Mware@@QAEAAV12@ABV12@@Z
?GetNormalize@Vector3D@Mware@@SA?AV12@ABV12@@Z
?Cross@Vector3D@Mware@@QAEAAV12@ABV12@@Z
?GetRotationAxis@Matrix4x4@Mware@@SA?AV12@MABVVector3D@2@@Z
?GetRotationX@Matrix4x4@Mware@@SA?AV12@M@Z
?GetRotationY@Matrix4x4@Mware@@SA?AV12@M@Z
?GetRotationZXY@Matrix4x4@Mware@@SA?AV12@MMM@Z
??KVector3D@Mware@@QBE?AV01@ABV01@@Z
?GetRotationZ@Matrix4x4@Mware@@SA?AV12@M@Z
??HVector4D@Mware@@QBE?AV01@ABV01@@Z
??DVector4D@Mware@@QBE?AV01@M@Z
??GVector4D@Mware@@QBE?AV01@ABV01@@Z
??KVector4D@Mware@@QBE?AV01@M@Z
?RotationZ@Vector3D@Mware@@QAEAAV12@ABM@Z
??0CLine3D@Mware@@QAE@MMMMMM@Z
??0CLine3D@Mware@@QAE@ABVVector3D@1@0@Z
?GetScaling@Matrix4x4@Mware@@SA?AV12@MMM@Z
?GetTranslation@Matrix4x4@Mware@@SA?AV12@MMM@Z
??0Matrix4x4@Mware@@QAE@ABVQuaternion@1@@Z
??0Quaternion@Mware@@QAE@MMMM@Z
?Add@Quaternion@Mware@@QAEAAV12@ABV12@@Z
?Sub@Quaternion@Mware@@QAEAAV12@ABV12@@Z
?Mul@Quaternion@Mware@@QAEAAV12@ABV12@@Z
?Dot@Quaternion@Mware@@QBEMABV12@@Z
?Normalize@Quaternion@Mware@@QAEAAV12@XZ
?LengthSq@Quaternion@Mware@@QBEMXZ
?Length@Quaternion@Mware@@QBEMXZ
?Conjugate@Quaternion@Mware@@QAEAAV12@XZ
?RotationXYZ@Quaternion@Mware@@QAEAAV12@ABM00@Z
?GetMersenneTwisterCount@CRandom@Mware@@QBEABHXZ
?GetMersenneTwisterSize@CRandom@Mware@@QBE?BHXZ
?GetMersenneTwister@CRandom@Mware@@QBEHPAEABI@Z
?SetMersenneTwisterCount@CRandom@Mware@@QAEXABH@Z
?SetMersenneTwister@CRandom@Mware@@QAEHPBEABI@Z
??0Matrix4x4@Mware@@QAE@MMMMMMMMMMMMMMMM@Z
??KVector2D@Mware@@QBE?AV01@ABV01@@Z
??0CFileAccessCash@Mware@@QAE@PAVIFile@1@@Z
??1CFileAccessCash@Mware@@UAE@XZ
?SeekStart@CFileAccessCash@Mware@@UAEIH@Z
?Read@CFileAccessCash@Mware@@UAEIPAXI@Z
?Close@CFileAccessCash@Mware@@UAEHXZ
?IsOpened@CFileAccessCash@Mware@@UAEHXZ
?Write@CFileAccessCash@Mware@@UAEHPBXH@Z
?Load@CFileAccessCash@Mware@@UAEIXZ
?GetFileSize@CFileAccessCash@Mware@@UAEIXZ
?SeekEnd@CFileAccessCash@Mware@@UAEIH@Z
?Seek@CFileAccessCash@Mware@@UAEIH@Z
?GetFilePosition@CFileAccessCash@Mware@@UAEIXZ
?GetLoadData@CFileAccessCash@Mware@@UAEPAXXZ
?SetCurrentPath@CFileAccessCash@Mware@@UAEHPBDH@Z
?GetFileName@CFileAccessCash@Mware@@UAEPBDXZ
?BeginAsyncAccess@CFileAccessCash@Mware@@UAEHXZ
?EndAsyncAccess@CFileAccessCash@Mware@@UAEHXZ
?WaitComplete@CFileAccessCash@Mware@@UAEHXZ
?Flush@CFileAccessCash@Mware@@UAEHXZ
?GetBaseFileInterface@CFileAccessCash@Mware@@UBEPAVIFile@2@XZ
ZSTD_decompress
??1CBoxOBB@Mware@@QAE@XZ
??1CPlane@Mware@@QAE@XZ
??0Vector3D@Mware@@QAE@ABV01@@Z
?Transpose@Matrix4x4@Mware@@QAEAAV12@XZ
?Translation@Matrix4x4@Mware@@QAEAAV12@ABM00@Z
?Scaling@Matrix4x4@Mware@@QAEAAV12@ABM00@Z
??4Matrix4x4@Mware@@QAEAAV01@ABV01@@Z
??0Matrix4x4@Mware@@QAE@XZ
??0CPlane@Mware@@QAE@XZ
?FromNormal@CPlane@Mware@@QAEXABVVector3D@2@0@Z
?Dot@Vector4D@Mware@@QBEMABV12@@Z
??1Vector4D@Mware@@QAE@XZ
??0Vector4D@Mware@@QAE@MMMM@Z
?Length@Vector3D@Mware@@QBEMXZ
??DVector3D@Mware@@QBE?AV01@M@Z
?Set@Vector3D@Mware@@QAEAAV12@MMM@Z
??0CBoxOBB@Mware@@QAE@XZ
?Dot@Vector3D@Mware@@QBEMABV12@@Z
??GVector3D@Mware@@QBE?AV01@ABV01@@Z
??4Vector3D@Mware@@QAEAAV01@ABV01@@Z
?TransformCoord@Vector3D@Mware@@QAEAAV12@ABVMatrix4x4@2@@Z
?Dissolution@Matrix4x4@Mware@@QBEXPAVVector3D@2@0PAV12@@Z
??0Vector3D@Mware@@QAE@XZ
??XMatrix4x4@Mware@@QAEAAV01@ABV01@@Z
??1Matrix4x4@Mware@@QAE@XZ
??0Matrix4x4@Mware@@QAE@ABV01@@Z
??1Vector3D@Mware@@QAE@XZ
??0Vector3D@Mware@@QAE@MMM@Z
?ReleaseMware@Mware@@YAXXZ
?Leave@CCriticalSection@Mware@@QAEXXZ
?Enter@CCriticalSection@Mware@@QAEXXZ
??0Vector2D@Mware@@QAE@MM@Z
??1Vector2D@Mware@@QAE@XZ
?CreateMware@Mware@@YAPAVICore@1@XZ
??1CCriticalSection@Mware@@UAE@XZ
??0CCriticalSection@Mware@@QAE@XZ
?Flush@CFile@Mware@@QAEHXZ
?GetLoadData@CFile@Mware@@QAEPAXXZ
?GetFilePosition@CFile@Mware@@QAEIXZ
?Seek@CFile@Mware@@QAEIH@Z
?SeekEnd@CFile@Mware@@QAEIH@Z
?SeekStart@CFile@Mware@@QAEIH@Z
?GetFileSize@CFile@Mware@@QAEIXZ
?Load@CFile@Mware@@QAEIXZ
?Read@CFile@Mware@@QAEIPAXI@Z
?Write@CFile@Mware@@QAEHPBXI@Z
?IsOpened@CFile@Mware@@QAEHXZ
?Close@CFile@Mware@@QAEHXZ
??1CFile@Mware@@QAE@XZ
?Open@CFile@Mware@@QAEHPBDW4eFileOpenMode@2@@Z
??0CFile@Mware@@QAE@XZ
??DMatrix4x4@Mware@@QBE?AV01@ABV01@@Z
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ