DOSBox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DOSBox.exe
Size

3.6MB
MD5

33294e0a8b970b8de45ce446e2add783
SHA1

c30c133f95547c6d91907c17073945ed93a580e4
SHA256

e09f78e60b5be25a6af0381b71a90b8aa625f2ea42ecd427638edf2abb7130f0
SHA512

fdcd70b3ac1af0c7a88fbe1fb1fd91ba7acff23228fde53bae9246b805a69bdd7a7cc84203ac8f9dc366a72e698fe47ed17eeb130f628550e15bd11340ebf621
SSDEEP

49152:wBuV+Pi+HXGT4RSQR13bK3cFXzF5quE4OyQveR+86yd8cbjABtAQo3SNTdd6YUq:jUiYPSQR13bCcBquE4OyUeR5jAJo3S/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOSBox.exe

Files

DOSBox.exe
.exe windows:4 windows x86 arch:x86

a072b350a585657aacf318262e0d2071

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

sdl

SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyMutex
SDL_DisplayYUVOverlay
SDL_FillRect
SDL_Flip
SDL_FreeSurface
SDL_FreeYUVOverlay
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GetError
SDL_GetKeyName
SDL_GetModState
SDL_GetTicks
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickUpdate
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_MapRGB
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PollEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromFile
SDL_ReadBE32
SDL_ReadLE32
SDL_SetAlpha
SDL_SetError
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetVideoMode
SDL_ShowCursor
SDL_ThreadID
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoModeOK
SDL_WM_GrabInput
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WaitEvent
SDL_mutexP
SDL_mutexV
SDL_strlcat
SDL_strlcpy

sdl_net

SDLNet_AddSocket
SDLNet_AllocSocketSet
SDLNet_CheckSockets
SDLNet_DelSocket
SDLNet_FreeSocketSet
SDLNet_Init
SDLNet_ResolveHost
SDLNet_TCP_Accept
SDLNet_TCP_Close
SDLNet_TCP_GetPeerAddress
SDLNet_TCP_Open
SDLNet_TCP_Recv
SDLNet_TCP_Send
SDLNet_UDP_Bind
SDLNet_UDP_Close
SDLNet_UDP_Open
SDLNet_UDP_Recv
SDLNet_UDP_Send

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
AllocConsole
ClearCommBreak
ClearCommError
CloseHandle
CreateEventA
CreateFileA
CreateSemaphoreA
DeviceIoControl
EscapeCommFunction
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeConsole
FreeLibrary
GetAtomNameA
GetCommModemStatus
GetCommState
GetCommandLineA
GetCurrentProcess
GetDriveTypeA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GetVolumeInformationA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
LocalFree
ReadFile
ReleaseSemaphore
ResetEvent
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleTitleA
SetEvent
SetFilePointer
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
WaitForSingleObject
WriteFile

msvcrt

_access
_chsize
_execlp
_fdopen
_fstat
_getcwd
_lseek
_mkdir
_putenv
_read
_rmdir
_stat
_strdup
_strupr
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_iob
_isctype
_onexit
_pctype
_setjmp
_setmode
_stricmp
_strnicmp
_vsnprintf
abort
acos
atan
atexit
atoi
calloc
ceil
cos
exit
exp
fclose
fflush
fgetc
fgets
floor
fmod
fopen
fprintf
fputc
fputs
fread
free
freopen
fseek
ftell
fwrite
getc
getenv
gmtime
ldexp
localtime
log
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
pow
printf
putc
putchar
puts
qsort
raise
rand
realloc
remove
rename
setbuf
setlocale
setvbuf
signal
sin
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtod
strtok
strtol
strxfrm
tan
time
tolower
toupper
ungetc
vsprintf

opengl32

glBegin
glBindTexture
glCallList
glClear
glClearColor
glDeleteLists
glDeleteTextures
glDisable
glEnable
glEnableClientState
glEnd
glEndList
glGenLists
glGenTextures
glGetIntegerv
glGetString
glIsList
glLoadIdentity
glMatrixMode
glNewList
glShadeModel
glTexCoord2f
glTexImage2D
glTexParameteri
glTexSubImage2D
glVertex2f
glViewport
wglGetProcAddress

shell32

SHGetSpecialFolderPathA

user32

GetKeyboardLayout
GetKeyboardLayoutNameA
GetSystemMetrics
wsprintfA

winmm

mciGetErrorStringA
mciSendCommandA
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutShortMsg
midiOutUnprepareHeader

ws2_32

getpeername
getsockname

Exports

Exports

FreeDLS
FreeRIFF
LoadDLS
LoadRIFF
PrintRIFF

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 28.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a072b350a585657aacf318262e0d2071

Headers

File Characteristics

Imports

sdl

sdl_net

advapi32

kernel32

msvcrt

opengl32

shell32

user32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.data Size: 173KB - Virtual size: 172KB

.ctors Size: 512B - Virtual size: 4B

.rdata Size: 242KB - Virtual size: 241KB

.bss Size: - Virtual size: 28.8MB

.edata Size: 512B - Virtual size: 145B

.idata Size: 9KB - Virtual size: 9KB

.rsrc Size: 83KB - Virtual size: 83KB

.reloc Size: 187KB - Virtual size: 186KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 173KB - Virtual size: 172KB

.ctors
Size: 512B - Virtual size: 4B

.rdata
Size: 242KB - Virtual size: 241KB

.bss
Size: - Virtual size: 28.8MB

.edata
Size: 512B - Virtual size: 145B

.idata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 83KB - Virtual size: 83KB

.reloc
Size: 187KB - Virtual size: 186KB