Static task
static1
General
-
Target
desmume-0.9.13-win64.zip
-
Size
5.8MB
-
MD5
77983e2cc7d4cb19a55330901d74f88e
-
SHA1
2103f7ab2f644c64682ba8913788ce4aa3835c84
-
SHA256
cbf710b8e6b29f0904e289a9b9a895548a2d7c7af5a3145c8279b97a69a09276
-
SHA512
07fe3bf1b9432ab8c27085808e578342b833e21ed013e0dff2d7e4566e3626b32f68578fbb1cd9b2ad010555ea8e6aba0b87abf6b3b10576ee3e045e3efdc699
-
SSDEEP
98304:exKasDppb3XQ1AgtuV5dYC8Gbl85Nmbrr+F3iZBHkm7X6VmJhIjEUuGlVDM7E9L3:egDPbHQ1AgkPWEbl85K4iZBHkm7X6Vm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DeSmuME_0.9.13_x64.exe
Files
-
desmume-0.9.13-win64.zip.zip
-
AUTHORS
-
COPYING
-
ChangeLog
-
DeSmuME_0.9.13_x64.exe.exe windows:6 windows x64 arch:x64
807b3ed3959cf88c66a716cf02930c7b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
avifil32
AVISaveOptions
AVIMakeCompressedStream
AVIStreamRelease
AVIStreamSetFormat
AVIFileOpenA
AVIFileCreateStreamA
AVIFileInit
AVIStreamWrite
AVIFileRelease
winmm
timeGetTime
joyGetDevCapsA
waveInClose
waveInPrepareHeader
waveInReset
waveInOpen
waveInStart
waveInAddBuffer
timeBeginPeriod
timeSetEvent
timeEndPeriod
timeKillEvent
timeGetDevCaps
joyGetPosEx
opengl32
glTexSubImage1D
glStencilMask
glBindTexture
glGenTextures
glVertexPointer
glEnable
glCullFace
glDepthMask
glCopyTexSubImage2D
glDisableClientState
glMatrixMode
glStencilFunc
glBlendFunc
glReadPixels
glColorMask
glLoadIdentity
wglGetProcAddress
glTexParameteri
glFinish
glDeleteTextures
glReadBuffer
glAlphaFunc
glTexCoordPointer
glClearColor
glViewport
glDrawArrays
glTexParameterf
glTexImage2D
glColorPointer
glTexEnvi
glDrawElements
glScalef
glClearDepth
glDisable
glGetFloatv
glDepthFunc
glTexSubImage2D
glGetString
glDrawBuffer
glGetIntegerv
glClearStencil
glEnd
glScissor
glTexCoord2f
glBegin
glVertex2i
glOrtho
wglGetCurrentContext
wglCreateContext
wglDeleteContext
wglMakeCurrent
glStencilOp
glEnableClientState
glTexImage1D
glClear
ws2_32
sendto
setsockopt
htonl
accept
gethostname
recvfrom
ntohs
socket
select
closesocket
bind
WSAGetLastError
recv
connect
send
inet_addr
htons
WSAStartup
__WSAFDIsSet
WSACleanup
gethostbyname
listen
user32
GetClientRect
SetDlgItemTextA
SetTimer
EndDialog
GetDlgItem
KillTimer
SetWindowLongPtrA
CloseClipboard
EndPaint
PostMessageA
InvalidateRect
GetKeyState
GetMenuItemCount
DeleteMenu
ScreenToClient
CreatePopupMenu
GetKeyboardState
ReleaseCapture
SetMenuItemInfoA
GetWindowTextA
SetWindowTextA
MessageBoxA
DestroyMenu
DrawMenuBar
GetMenuItemInfoA
InsertMenuItemA
GetCursorPos
EnableWindow
DialogBoxParamW
CheckDlgButton
MessageBoxW
SetCapture
SetMenuItemInfoW
EmptyClipboard
TrackMouseEvent
GetMonitorInfoA
MoveWindow
GetMenuStringW
SetClipboardData
PeekMessageA
SetDlgItemInt
ModifyMenuA
GetFocus
SetActiveWindow
GetActiveWindow
RedrawWindow
GetWindowTextLengthA
SetWindowTextW
SetDlgItemTextW
GetDlgItemTextW
GetForegroundWindow
FillRect
SendMessageA
SetFocus
IsDlgButtonChecked
IsWindowEnabled
CallWindowProcA
ShowWindow
wsprintfA
CheckRadioButton
DestroyWindow
GetWindowRect
CreateDialogParamW
RegisterClassExA
GetSysColorBrush
CreateWindowExA
DefWindowProcA
GetWindowLongA
SetWindowLongA
LoadCursorA
GetDesktopWindow
SetWindowPos
ReleaseDC
SetForegroundWindow
UpdateWindow
EnableMenuItem
SetRect
UnregisterClassA
GetPropA
LoadAcceleratorsA
RemoveMenu
CreateMenu
FrameRect
GetScrollInfo
GetScrollPos
GetParent
GetDlgItemInt
SetScrollRange
SetScrollPos
SendInput
InsertMenuItemW
DialogBoxParamA
GetMenuItemInfoW
DefWindowProcW
SetPropA
GetMenu
InsertMenuA
MonitorFromWindow
GetWindowLongPtrA
OpenClipboard
OffsetRect
TranslateAcceleratorA
GetDlgItemTextA
GetAsyncKeyState
IsDialogMessageA
LoadStringW
ShowCursor
GetDlgCtrlID
LoadMenuA
GetMessagePos
TrackPopupMenu
GetSubMenu
CheckMenuItem
SetMenuDefaultItem
PostQuitMessage
SendDlgItemMessageA
ClientToScreen
SetRectEmpty
IsZoomed
IsIconic
AdjustWindowRectEx
GetMessageA
DispatchMessageA
GetDC
CreateWindowExW
GetSystemMetrics
UnregisterClassW
RegisterClassExW
GetMenuBarInfo
DrawTextA
LoadBitmapA
GetSysColor
AdjustWindowRect
SetMenu
TranslateMessage
CreateDialogParamA
LoadIconA
SystemParametersInfoA
BeginPaint
gdi32
DeleteDC
SetTextColor
SetBkMode
DeleteObject
CreateCompatibleDC
CreateFontA
SetPixelFormat
TextOutA
ChoosePixelFormat
DescribePixelFormat
SwapBuffers
MoveToEx
CreatePen
LineTo
StretchBlt
SetDCPenColor
SetDIBitsToDevice
GetStockObject
SetBkColor
GetTextExtentPoint32A
GetDIBits
SetDIBits
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
ExtTextOutA
GetPixelFormat
SelectObject
SetTextAlign
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
DragAcceptFiles
DragFinish
ShellExecuteA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFolderPathA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetOpenFileNameW
shlwapi
PathCompactPathW
SHDeleteKeyA
comctl32
ImageList_ReplaceIcon
ImageList_Create
ddraw
DirectDrawCreateEx
dinput8
DirectInput8Create
dsound
ord11
kernel32
SetFilePointer
WriteFile
ReadFile
SetFileAttributesA
CopyFileA
ResetEvent
SignalObjectAndWait
SetConsoleTitleW
AllocConsole
GetFileType
SetConsoleOutputCP
GetConsoleWindow
FreeLibrary
SetConsoleCP
GetProcAddress
FlushConsoleInputBuffer
FreeConsole
LoadLibraryA
GetConsoleMode
GetACP
PeekConsoleInputA
CreateFileA
GetStdHandle
GetCommandLineW
SetConsoleCtrlHandler
GetModuleHandleA
GetSystemTimeAsFileTime
VirtualFreeEx
VirtualAllocEx
GetCurrentProcess
MultiByteToWideChar
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFileAttributesA
lstrlenA
GetModuleFileNameA
CreateDirectoryW
GetLastError
lstrcmpA
CreateEventA
DeleteCriticalSection
CreateThread
CloseHandle
SetEvent
Sleep
GetCurrentThreadId
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesExA
FindClose
FindNextFileA
FindFirstFileA
QueryPerformanceCounter
GetSystemTime
SystemTimeToFileTime
GetSystemInfo
QueryPerformanceFrequency
GetFileSize
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreA
WideCharToMultiByte
WritePrivateProfileStringA
ResumeThread
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationA
SetProcessAffinityMask
GlobalAddAtomA
CreateFileW
ExitProcess
GetCurrentProcessId
GetTempPathA
GetFullPathNameA
SwitchToThread
GetTickCount
GetModuleFileNameW
GetTempPathW
SetCurrentDirectoryA
OutputDebugStringW
OutputDebugStringA
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
SetConsoleMode
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateInstance
CoInitializeEx
msvcp140
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Xout_of_range@std@@YAXPEBD@Z
?rdstate@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcmp
__std_type_info_destroy_list
_CxxThrowException
__current_exception_context
__current_exception
memchr
memset
memcpy
longjmp
__C_specific_handler
strrchr
strstr
strchr
__std_exception_copy
__std_exception_destroy
__std_terminate
_purecall
__intrinsic_setjmp
api-ms-win-crt-stdio-l1-1-0
_wfopen
_chsize
__acrt_iob_func
__stdio_common_vfprintf
ftell
fopen
_fileno
fclose
_wopen
_lseeki64
fputs
fseek
fwrite
__stdio_common_vswprintf
fread
__stdio_common_vsnprintf_s
fputc
fflush
fgetc
_fseeki64
_ftelli64
setvbuf
_set_fmode
_wfopen_s
fgets
feof
__stdio_common_vsprintf
__p__commode
puts
_open
_read
_lseek
_write
fopen_s
ferror
__stdio_common_vsscanf
freopen
_close
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
abort
_errno
strerror
_register_thread_local_exe_atexit_callback
_beginthreadex
_c_exit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
terminate
__p___argc
_cexit
__p___argv
_crt_at_quick_exit
_crt_atexit
exit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-utility-l1-1-0
qsort
srand
rand
api-ms-win-crt-string-l1-1-0
_stricmp
strcmp
isspace
toupper
_strdup
tolower
strnlen
isdigit
isalpha
strncmp
_strnicmp
strncpy
_wcsdup
strpbrk
strncat
strcpy_s
strcat_s
isalnum
towlower
_wcsnicmp
towupper
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
realloc
_set_new_mode
calloc
api-ms-win-crt-time-l1-1-0
clock
strftime
_time64
_localtime64
_localtime64_s
_mktime64
api-ms-win-crt-convert-l1-1-0
_itoa
wcstombs
strtol
_itow
atol
_ltoa
strtoul
atoi
atof
mbrtowc
wcrtomb
wctob
mbsrtowcs
api-ms-win-crt-filesystem-l1-1-0
_fullpath
_stat64i32
_wstat64i32
_mkdir
_chdir
_unlink
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___mb_cur_max_func
api-ms-win-crt-math-l1-1-0
expf
acos
fmod
ceil
sin
cos
atan2
sqrt
pow
roundf
__setusermatherr
logf
tan
Sections
.text Size: 36.2MB - Virtual size: 36.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 669KB - Virtual size: 171.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
README
-
README.WIN
-
desmume.ddb