NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
megaman_rocknroll_win_1.3.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
megaman_rocknroll_win_1.3.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
MegaMan_RocknRoll.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
MegaMan_RocknRoll.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
data.pck
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
data.pck
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
readme.txt
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
readme.txt
Resource
win10v2004-20230703-en
General
-
Target
megaman_rocknroll_win_1.3.zip
-
Size
89.1MB
-
MD5
d999fe5e9affc137ffe33ea94eb0bc1c
-
SHA1
84dabc095e6bc515e9b514ecefa3d677ea985daa
-
SHA256
e1180d8ecf4b6c2cc84ace392075f5a82cef0fe5360bb3ed6a1d9a47eff410a7
-
SHA512
6dc9147f6c721608f08f4637697cbfd59b795873eeb80805f8a3ec0052077f2e994264cc38792071cbb55ebfa8668deb9af4d55dd86376ddcc4d9dd761cd5003
-
SSDEEP
1572864:9MQTZI/u1AUVZr2i4FZmw+cj3ui0+VWi5YLE23H814s4+60zIEUtR61sOybNvkIw:R2Wvr2bFZmw+E3L0SD5MEei4+6/EUtRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MegaMan_RocknRoll.exe
Files
-
megaman_rocknroll_win_1.3.zip.zip
-
MegaMan_RocknRoll.exe.exe windows x86
802b9b8c7df3c2edb88c8d0117f27aff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
opengl32
glViewport
glTexSubImage2D
glTexParameteri
glTexParameterf
glTexImage2D
glScissor
glReadPixels
glReadBuffer
glPolygonMode
glPixelStorei
glLineWidth
glGetString
glGetIntegerv
glGetFloatv
glGenTextures
glFrontFace
glFlush
glEnable
glDrawElements
glDrawBuffer
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glColorMask
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
wglMakeCurrent
wglGetProcAddress
wglDeleteContext
wglCreateContext
wglGetCurrentDC
kernel32
GetLocalTime
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryW
GlobalLock
GlobalUnlock
SystemTimeToFileTime
GetSystemTime
MultiByteToWideChar
GetUserDefaultUILanguage
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
LoadLibraryA
WideCharToMultiByte
LocalFree
GetTimeZoneInformation
CreateProcessW
TerminateProcess
Sleep
WaitForSingleObject
QueryPerformanceFrequency
SetEndOfFile
WriteConsoleW
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsValidCodePage
FindFirstFileExA
GetProcessHeap
GetFullPathNameW
SetFilePointerEx
ReadConsoleW
GetConsoleCP
FlushFileBuffers
CreatePipe
GetFileAttributesExW
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetCommandLineA
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapAlloc
FreeLibraryAndExitThread
GlobalAlloc
MoveFileExW
DeleteFileW
RemoveDirectoryW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetLastError
GetLastError
GetEnvironmentVariableW
GetOEMCP
GetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
SetConsoleCtrlHandler
GetModuleHandleExW
ReadFile
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
DuplicateHandle
LoadLibraryExW
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
GetCurrentProcess
GetCommandLineW
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
ExitProcess
SetThreadPriority
CreateEventA
ResetEvent
SetEvent
CreateThread
CreateSemaphoreA
WaitForSingleObjectEx
ReleaseSemaphore
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReplaceFileW
GetLogicalDrives
GetFileAttributesW
GetDiskFreeSpaceExA
FindNextFileW
FindFirstFileExW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
FlushConsoleInputBuffer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
ExitThread
GetFileType
WriteFile
GetCurrentThreadId
FindClose
FindNextFileA
CloseHandle
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
GetCPInfo
user32
GetDC
MessageBoxA
OpenClipboard
GetClientRect
CloseClipboard
GetKeyboardLayoutNameA
TrackMouseEvent
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageA
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
FlashWindowEx
GetRawInputDeviceList
GetRawInputDeviceInfoA
EnumDisplayMonitors
MonitorFromWindow
EnumDisplaySettingsA
CreateIconFromResource
LoadIconA
LoadCursorA
SetWindowLongA
GetWindowLongA
ScreenToClient
ClientToScreen
ClipCursor
SetCursor
SetCursorPos
MessageBoxW
AdjustWindowRectEx
GetWindowRect
SetClipboardData
SetWindowTextW
ReleaseDC
AllowSetForegroundWindow
SetForegroundWindow
GetSystemMetrics
KillTimer
SetTimer
ReleaseCapture
SetCapture
SetFocus
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
MoveWindow
gdi32
SwapBuffers
SetPixelFormat
ChoosePixelFormat
GetDeviceCaps
wsock32
inet_ntoa
htons
send
recv
listen
ntohs
select
closesocket
socket
WSAStartup
WSACleanup
recvfrom
sendto
WSAGetLastError
connect
shutdown
WSASetLastError
bind
accept
setsockopt
__WSAFDIsSet
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
DragAcceptFiles
DragQueryFileW
dinput8
DirectInput8Create
dsound
ord6
ord7
ord1
ord2
ole32
CoUninitialize
CoInitialize
iphlpapi
GetAdaptersAddresses
shlwapi
PathFileExistsW
ws2_32
freeaddrinfo
getaddrinfo
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
Exports
Exports
Sections
.text Size: 11.1MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 505KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
data.pck
-
readme.txt