Static task
static1
Behavioral task
behavioral1
Sample
Inverse Snake.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Inverse Snake.exe
Resource
win10v2004-20230915-en
General
-
Target
Inverse Snake.exe
-
Size
222KB
-
MD5
6e8c25cfb2e3f657b6ce22cb02ef2faa
-
SHA1
e6b563ed502c0608e7327cadbee25d27d3e7d4f4
-
SHA256
d3e6e64125b04a188f31ba4f451d9476e45d66dd4de0da257a01561996e2e809
-
SHA512
92e1ddd166af6c99a051aa50bc9b5cd0c4dfa56fa3fc8eefc4446b28b28e78b4ada3a4ebd0224545ef8d19e1b10092df0c5bab940bd024770a2e9cb5a639f9f8
-
SSDEEP
1536:v9Zq/kR+5iemx0KKdcvL78Q2bX00tN+CPwd:v9TIiemyKKdc0Qf0HrPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Inverse Snake.exe
Files
-
Inverse Snake.exe.exe windows:6 windows x86
ba8468ea82ed874375229d5322f6aaaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sfml-graphics-2
??0Color@sf@@QAE@EEEE@Z
?loadFromFile@Font@sf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Image@sf@@QAE@XZ
??1Texture@sf@@QAE@XZ
?loadFromFile@Texture@sf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Rect@H@2@@Z
??1Image@sf@@QAE@XZ
?setScale@Transformable@sf@@QAEXMM@Z
?getPosition@Transformable@sf@@QBEABV?$Vector2@M@2@XZ
?move@Transformable@sf@@QAEXMM@Z
??1RectangleShape@sf@@UAE@XZ
??1Sprite@sf@@UAE@XZ
?loadFromFile@Image@sf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getSize@Image@sf@@QBE?AV?$Vector2@I@2@XZ
?getPixelsPtr@Image@sf@@QBEPBEXZ
??0Sprite@sf@@QAE@XZ
??0RenderWindow@sf@@QAE@VVideoMode@1@ABVString@1@IABUContextSettings@1@@Z
??1RenderWindow@sf@@UAE@XZ
??0Font@sf@@QAE@XZ
?onResize@RenderWindow@sf@@MAEXXZ
??1Font@sf@@QAE@XZ
?clear@RenderTarget@sf@@QAEXABVColor@2@@Z
?onCreate@RenderWindow@sf@@MAEXXZ
?setActive@RenderWindow@sf@@UAE_N_N@Z
?setPosition@Transformable@sf@@QAEXMM@Z
?White@Color@sf@@2V12@B
?setTexture@Sprite@sf@@QAEXABVTexture@2@_N@Z
??0RectangleShape@sf@@QAE@ABV?$Vector2@M@1@@Z
?Transparent@Color@sf@@2V12@B
?setSize@RectangleShape@sf@@QAEXABV?$Vector2@M@2@@Z
?Default@RenderStates@sf@@2V12@B
?getSize@RectangleShape@sf@@QBEABV?$Vector2@M@2@XZ
?Black@Color@sf@@2V12@B
?getSize@RenderWindow@sf@@UBE?AV?$Vector2@I@2@XZ
??0Texture@sf@@QAE@XZ
?setFillColor@Shape@sf@@QAEXABVColor@2@@Z
?setOutlineColor@Shape@sf@@QAEXABVColor@2@@Z
??0Color@sf@@QAE@XZ
?setOutlineThickness@Shape@sf@@QAEXM@Z
?draw@RenderTarget@sf@@QAEXABVDrawable@2@ABVRenderStates@2@@Z
sfml-window-2
?close@Window@sf@@QAEXXZ
?display@Window@sf@@QAEXXZ
?setIcon@Window@sf@@QAEXIIPBE@Z
?setSize@Window@sf@@QAEXABV?$Vector2@I@2@@Z
?isKeyPressed@Keyboard@sf@@SA_NW4Key@12@@Z
?create@Window@sf@@QAEXVVideoMode@2@ABVString@2@IABUContextSettings@2@@Z
?getDesktopMode@VideoMode@sf@@SA?AV12@XZ
??0VideoMode@sf@@QAE@III@Z
?hasFocus@Window@sf@@QBE_NXZ
?isOpen@Window@sf@@QBE_NXZ
?pollEvent@Window@sf@@QAE_NAAVEvent@2@@Z
sfml-audio-2
??0Sound@sf@@QAE@XZ
??0Sound@sf@@QAE@ABV01@@Z
??1Sound@sf@@UAE@XZ
?setBuffer@Sound@sf@@QAEXABVSoundBuffer@2@@Z
??4Sound@sf@@QAEAAV01@ABV01@@Z
??0SoundBuffer@sf@@QAE@XZ
??1SoundBuffer@sf@@QAE@XZ
?loadFromFile@SoundBuffer@sf@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setPitch@SoundSource@sf@@QAEXM@Z
?setVolume@SoundSource@sf@@QAEXM@Z
sfml-system-2
??0String@sf@@QAE@PBDABVlocale@std@@@Z
??1String@sf@@QAE@XZ
glass 4.0 ui api
?setTextScale@Button@gs@@UAEXMM@Z
?end@Clock@util@gs@@UAEXXZ
?wait@Clock@util@gs@@UAEXI@Z
?setWindow@input@gs@@YAXPAVRenderWindow@sf@@@Z
?update@Menu@gs@@UAEXXZ
?update@Transition@gs@@UAEXXZ
?start@Transition@gs@@UAEXXZ
?apply@Transition@gs@@UAEXAAVRenderTarget@sf@@@Z
??1Clock@util@gs@@QAE@XZ
??0Clock@util@gs@@QAE@XZ
?getState@State@util@gs@@UBEHXZ
?setNextState@State@util@gs@@UAEXH@Z
?setState@State@util@gs@@UAEXH@Z
?changeState@State@util@gs@@UAEXXZ
??1State@util@gs@@QAE@XZ
??0State@util@gs@@QAE@XZ
?setPercentage@Slider@gs@@UAEXM@Z
?updateInputs@input@gs@@YAXXZ
??4Button@gs@@QAEAAV01@ABV01@@Z
?draw@gs@@YAXPAVRenderTarget@sf@@AAVMenu@1@VRenderStates@3@@Z
?draw@gs@@YAXPAVRenderTarget@sf@@AAVText@1@VRenderStates@3@@Z
??0Text@gs@@QAE@XZ
??1Text@gs@@QAE@XZ
?setPosition@Text@gs@@UAEXV?$Vector2@M@sf@@@Z
?setScale@Text@gs@@UAEXMM@Z
?setFont@Text@gs@@UAEXABVFont@sf@@@Z
?setString@Text@gs@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setFillColor@Text@gs@@UAEXVColor@sf@@@Z
?setOutlineThickness@Text@gs@@UAEXM@Z
?setOutlineColor@Text@gs@@UAEXVColor@sf@@@Z
??0Slider@gs@@QAE@XZ
??1Slider@gs@@QAE@XZ
?setPosition@Slider@gs@@UAEXMM@Z
?setSize@Slider@gs@@UAEXMM@Z
?setOnColor@Slider@gs@@UAEXVColor@sf@@@Z
?getPercentage@Slider@gs@@UBEMXZ
??0Menu@gs@@QAE@XZ
??1Menu@gs@@QAE@XZ
?add@Menu@gs@@UAEXPAVComponent@2@@Z
??0Button@gs@@QAE@XZ
??1Button@gs@@QAE@XZ
?setPosition@Button@gs@@UAEXMM@Z
?setSize@Button@gs@@UAEXMM@Z
?setSelectedFillColor@Button@gs@@UAEXVColor@sf@@@Z
?setOutlineThickness@Button@gs@@UAEXM@Z
?setFont@Button@gs@@UAEXABVFont@sf@@@Z
?setString@Button@gs@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setInactiveTextFillColor@Button@gs@@UAEXVColor@sf@@@Z
?setSelectedTextFillColor@Button@gs@@UAEXVColor@sf@@@Z
?setShapeColors@Button@gs@@UAEXVColor@sf@@@Z
?setScaleModifiers@Button@gs@@UAEXM@Z
?getPosition@Button@gs@@UBE?AV?$Vector2@M@sf@@XZ
?getInactiveFillColor@Button@gs@@UBE?AVColor@sf@@XZ
?getInactiveTextFillColor@Button@gs@@UBE?AVColor@sf@@XZ
??0Transition@gs@@QAE@XZ
??1Transition@gs@@QAE@XZ
?begin@Clock@util@gs@@UAEXXZ
kernel32
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetConsoleWindow
UnhandledExceptionFilter
user32
ShowWindow
msvcp140
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
vcruntime140
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
__current_exception
__current_exception_context
memset
_except_handler4_common
_CxxThrowException
memcpy
memmove
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_errno
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
fflush
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf
fgetpos
fwrite
fputc
fgetc
fclose
api-ms-win-crt-convert-l1-1-0
strtol
strtof
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-math-l1-1-0
__setusermatherr
_libm_sse2_sin_precise
floor
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ