PPSSPPWindows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PPSSPPWindows.exe
Size

13.3MB
MD5

722f4dfdd5f90cec6ef56189333f2df5
SHA1

19540dde20c81bf40b1414c7a232d84a26366faa
SHA256

e1b4cb472cf695fb0e25d427a5ec1c56bf7a84ca22b7209ea468be9a9f7baa16
SHA512

1e7d1f1b2c129084da60132cf31e68d9f5afce76364ff4ad402f7a2b3343b9dabef63e60a4ac8975d4fe2493ee02a3c72fbac1e9cebe173db694b6c29a7a7a4e
SSDEEP

393216:+r33MjQwVOiF0nBrTCTOfhkxdPuxOrDnZia:MMj1VOiFkBrtuLrDnZf

Score

1^/10

Malware Config

Signatures

Files

PPSSPPWindows.exe
.exe windows:6 windows x86 arch:x86

6b5331034c0fd3cfdd13053c96695d81

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

11/11/2022, 00:00

Not After

10/11/2025, 23:59

Subject

SERIALNUMBER=556906-5153,CN=Millionth Line AB,O=Millionth Line AB,ST=Stockholms län,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39
Signer

Actual PE Digest

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Temp\BuildTemp\1.17.1_Windows_BUILD\ppsspp\PPSSPPWindows.pdb

Imports

uxtheme

DrawThemeBackground
CloseThemeData
DrawThemeText
OpenThemeData

mfplat

MFCreateAttributes
MFStartup
MFShutdown

shlwapi

ord219

winmm

timeEndPeriod
timeBeginPeriod

dsound

ord11

comctl32

ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon

d3d9

Direct3DCreate9

opengl32

glDrawArrays
glViewport
glTexParameteri
glTexImage2D
glScissor
glPixelStorei
glGenTextures
glGetError
glGetIntegerv
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
glClearDepth
glClearStencil
glColorMask
glCullFace
glDepthFunc
glDepthMask
glDepthRange
glFrontFace
glGetFloatv
glGetString
glGetTexLevelParameteriv
glLogicOp
glReadBuffer
glReadPixels
glStencilFunc
glStencilMask
glStencilOp
glTexParameterf
glTexSubImage2D
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glGetTexImage

kernel32

CompareStringOrdinal
GetModuleFileNameW
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetThreadPriority
OutputDebugStringA
SetEvent
CreateEventW
GetConsoleWindow
GetCommandLineW
GetTempPathW
IsDebuggerPresent
GlobalUnlock
GlobalLock
LocalFree
SetThreadExecutionState
GetLocaleInfoW
GetCurrentDirectoryW
GetExitCodeProcess
CreateProcessW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
FormatMessageA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
UnmapViewOfFile
GetLastError
CreateFileMappingW
CreateMutexW
ReleaseMutex
IsWow64Process
GetLogicalProcessorInformation
GetCurrentProcess
GetLogicalDriveStringsW
FindNextFileW
FindFirstFileExW
FindClose
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GlobalAddAtomW
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
CopyFileW
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
DeleteFileW
CreateFileW
CreateDirectoryW
MultiByteToWideChar
OutputDebugStringW
HeapSize
HeapQueryInformation
FlushFileBuffers
ReadConsoleW
SetStdHandle
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
InitializeSListHead
TerminateProcess
RtlUnwind
SetLastError
VirtualQuery
InitializeCriticalSectionAndSpinCount
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
MoveFileExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
HeapFree
IsValidCodePage
HeapReAlloc
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
ResetEvent
DuplicateHandle
ReleaseSemaphore
CreateEventA
GetModuleHandleA
AreFileApisANSI
FindFirstFileW
WaitNamedPipeW
lstrlenW
GetFileTime
LCMapStringW
IsValidLocale
GetFileAttributesW
SetFileAttributesW
GetTempFileNameW
MulDiv
GetDiskFreeSpaceExW
CreateSemaphoreA
MapViewOfFileEx
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SleepConditionVariableCS
InitializeConditionVariable
LoadLibraryExW
SetConsoleOutputCP
GetTickCount
GetProcessAffinityMask
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
MapViewOfFile

user32

SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
SystemParametersInfoW
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
ShowOwnedPopups
TrackMouseEvent
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
GetMessageExtraInfo
DestroyIcon
LoadIconW
LoadCursorW
GetParent
GetSysColorBrush
GetClientRect
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW
DefWindowProcW
GetWindowTextA
SetWindowTextA
EnableWindow
MessageBoxW
SetWindowLongW
GetWindowLongW
MessageBoxA
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxParamW
SendMessageW
GetWindowPlacement
IsIconic
GetSystemMetrics
SetMenuInfo
GetWindowDC
ReleaseDC
AdjustWindowRect
ShowCursor
ClipCursor
FillRect
OffsetRect
LoadImageW
SetWindowPos
GetKeyboardLayout
GetMessageW
TranslateMessage
DispatchMessageW
GetClipboardData
LoadAcceleratorsW
TranslateAcceleratorW
EnumDisplaySettingsW
SetClipboardData
RegisterClipboardFormatA
GetAsyncKeyState
PostQuitMessage
DrawIconEx
GetDoubleClickTime
DrawTextExW
GetDC
GetSystemMenu

gdi32

GetTextExtentPoint32W
SetMapMode
GetTextFaceW
CreateDIBSection
GetTextMetricsW
GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceExW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

DragQueryFileW
SHGetPathFromIDListW
CommandLineToArgvW
SHOpenFolderAndSelectItems
SHParseDisplayName
DragAcceptFiles
SHBrowseForFolderW
ShellExecuteW
SHGetFolderPathW

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstance
PropVariantClear

oleaut32

SysAllocString
SysFreeString
VariantInit

ws2_32

__WSAFDIsSet
accept
bind
closesocket
connect
getpeername
getsockname
htons
listen
getnameinfo
inet_addr
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
WSAGetLastError
htonl
ioctlsocket
inet_ntop
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
gethostname
getsockopt
WSAIoctl
WSAAddressToStringW
inet_pton

dinput8

DirectInput8Create

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA

winhttp

WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest

advapi32

RegSetValueExW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
RegQueryValueExW
CryptGenRandom
RegCreateKeyExW
RegOpenKeyExW
CryptAcquireContextW
GetSecurityInfo

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 186KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 469KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b5331034c0fd3cfdd13053c96695d81

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

uxtheme

mfplat

shlwapi

winmm

dsound

comctl32

d3d9

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

winhttp

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 9.7MB - Virtual size: 9.7MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 186KB - Virtual size: 3.4MB

.rodata Size: 4KB - Virtual size: 3KB

_RDATA Size: 188KB - Virtual size: 188KB

.rsrc Size: 133KB - Virtual size: 133KB

.reloc Size: 469KB - Virtual size: 468KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39
Signer

.text
Size: 9.7MB - Virtual size: 9.7MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 186KB - Virtual size: 3.4MB

.rodata
Size: 4KB - Virtual size: 3KB

_RDATA
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 133KB - Virtual size: 133KB

.reloc
Size: 469KB - Virtual size: 468KB