B:\svn\desmume\branches\release_0_9_11\desmume\src\windows\__bins\DeSmuME_VS2010_release.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DeSmuME_0.9.11_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DeSmuME_0.9.11_x86.exe
Resource
win10v2004-20240426-en
General
-
Target
DeSmuME_0.9.11_x86.exe
-
Size
3.0MB
-
MD5
4dbb54975ebb94fe9f72ca741752b51c
-
SHA1
97c381a0d6862a26ea619dad2470a82e2fa512fd
-
SHA256
56f137e052d0df3f53d4399e5a91afc7494a1a33dc2a734a3ef211d0e43b31fc
-
SHA512
5f260267b1e6c2bff992f9471d6c9b660b708961e737d358f106adca3a7a803979c228a941de4d2990b3025207a3dec1d9eca87c80611f75c1270cb6a3d8ffe7
-
SSDEEP
49152:fBIuLYWxQ5J0t8Bo8Dd95d0FZTspOZf6L:fpLYHD0t8C0d95dw4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeSmuME_0.9.11_x86.exe
Files
-
DeSmuME_0.9.11_x86.exe.exe windows:5 windows x86 arch:x86
6172b11dc26d10c0885d1e6ed28729c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
dinput8
DirectInput8Create
ddraw
DirectDrawCreateEx
dsound
ord11
avifil32
AVIFileRelease
AVIStreamWrite
AVIFileOpenA
AVIMakeCompressedStream
AVIFileInit
AVISaveOptions
AVIStreamRelease
AVIFileCreateStreamA
AVIStreamSetFormat
winmm
timeSetEvent
timeEndPeriod
waveInClose
waveInPrepareHeader
waveInOpen
waveInAddBuffer
waveInReset
waveInStart
timeGetDevCaps
timeBeginPeriod
timeKillEvent
timeGetTime
opengl32
glStencilFunc
wglGetCurrentContext
wglCreateContext
wglDeleteContext
wglMakeCurrent
glDeleteTextures
glClearDepth
glGetIntegerv
glEnableClientState
glAlphaFunc
glDepthFunc
glClear
glClearColor
glDrawElements
glTexSubImage2D
glColorMask
glFinish
glBindTexture
glTexImage2D
glDisable
glGetString
glColorPointer
glDepthMask
glTexParameteri
glClearStencil
glReadPixels
glDisableClientState
glBlendFunc
glCullFace
glScalef
glMatrixMode
glTexEnvi
glViewport
glTexImage1D
glVertexPointer
glTexCoordPointer
glStencilOp
glEnable
wglGetProcAddress
glTexSubImage1D
glGenTextures
glLoadIdentity
glReadBuffer
glOrtho
glTexCoord2f
glScissor
glEnd
glVertex2i
glBegin
user32
SetForegroundWindow
IsZoomed
SetCapture
GetDlgItemInt
CloseClipboard
ClientToScreen
DialogBoxParamA
CreateWindowExW
SetMenuItemInfoA
DestroyMenu
SetDlgItemInt
SetWindowTextA
GetMenuItemCount
DrawMenuBar
CreatePopupMenu
GetMenuItemInfoA
GetCursorPos
MessageBoxA
GetAsyncKeyState
GetWindowTextA
GetKeyboardState
DeleteMenu
GetKeyState
InsertMenuItemA
ScreenToClient
SetDlgItemTextA
EndDialog
GetDlgItem
InvalidateRect
SetWindowLongA
BeginPaint
GetClientRect
KillTimer
GetMenuStringW
SetTimer
EndPaint
CallWindowProcA
CheckRadioButton
CreateDialogParamW
IsDlgButtonChecked
ShowWindow
CheckDlgButton
SendMessageA
SetFocus
wsprintfA
DialogBoxParamW
DestroyWindow
LoadCursorA
GetSysColorBrush
SetClipboardData
CreateWindowExA
GetWindowLongA
RegisterClassExA
SetWindowPos
GetDesktopWindow
GetWindowRect
CheckMenuItem
AdjustWindowRect
UpdateWindow
GetSystemMetrics
SystemParametersInfoA
AdjustWindowRectEx
DispatchMessageA
SetMenu
GetSysColor
ReleaseDC
UnregisterClassA
SetRect
GetMenuItemInfoW
FillRect
IsDialogMessageA
TranslateMessage
GetDC
LoadIconA
GetMenu
OffsetRect
SetPropA
PeekMessageA
EmptyClipboard
TranslateAcceleratorA
OpenClipboard
ReleaseCapture
InsertMenuA
EnableWindow
DefWindowProcA
LoadBitmapA
GetMenuBarInfo
DrawTextA
CreateDialogParamA
GetMessageA
SendDlgItemMessageA
GetMessagePos
SetMenuDefaultItem
EnableMenuItem
LoadMenuA
GetSubMenu
TrackPopupMenu
PostQuitMessage
GetDlgCtrlID
PostMessageA
LoadStringW
ShowCursor
SetWindowTextW
SetDlgItemTextW
GetDlgItemTextW
GetForegroundWindow
IsWindowEnabled
GetActiveWindow
RedrawWindow
GetWindowTextLengthA
GetFocus
SetActiveWindow
MoveWindow
ModifyMenuA
SetMenuItemInfoW
GetDlgItemTextA
GetPropA
CreateMenu
LoadAcceleratorsA
RemoveMenu
FrameRect
GetParent
GetScrollInfo
GetScrollPos
SetScrollRange
SetScrollPos
SendInput
gdi32
CreateCompatibleBitmap
SetTextAlign
CreateCompatibleDC
SelectObject
GetObjectA
CreateSolidBrush
GetDIBits
GetTextExtentPoint32A
GetStockObject
SetBkColor
BitBlt
SwapBuffers
CreateFontA
SetDIBitsToDevice
SetPixelFormat
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
CreatePen
LineTo
MoveToEx
StretchBlt
SetDCPenColor
SetTextColor
DeleteDC
SetBkMode
SetDIBits
TextOutA
DeleteObject
ExtTextOutA
shell32
DragAcceptFiles
ShellExecuteA
DragQueryFileA
SHBrowseForFolderA
DragFinish
SHGetMalloc
SHGetFolderPathA
SHGetPathFromIDListA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shlwapi
SHDeleteKeyA
PathCompactPathA
comctl32
ImageList_Create
ImageList_ReplaceIcon
kernel32
TlsAlloc
GetCurrentThread
DuplicateHandle
SetThreadPriority
TlsGetValue
TlsSetValue
GetExitCodeProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetCurrentDirectoryA
GetTempPathW
GetModuleFileNameW
SwitchToThread
GetTickCount
InterlockedDecrement
InterlockedIncrement
GetFullPathNameA
GetTempPathA
GetCurrentThreadId
QueryPerformanceFrequency
GetPrivateProfileStringA
SignalObjectAndWait
QueryPerformanceCounter
GlobalAddAtomA
SetProcessAffinityMask
ResumeThread
FindFirstChangeNotificationA
TerminateThread
GetFileAttributesExA
FindCloseChangeNotification
WritePrivateProfileStringA
ResetEvent
ReleaseSemaphore
SetFileAttributesA
CopyFileA
MultiByteToWideChar
GetFileAttributesA
WideCharToMultiByte
PeekConsoleInputA
SetConsoleTitleW
SetConsoleOutputCP
SetConsoleCtrlHandler
GetFileType
LoadLibraryA
GetProcAddress
GetStdHandle
GetACP
SetConsoleMode
SetConsoleCP
GetConsoleWindow
FreeConsole
GetConsoleMode
GetPrivateProfileIntA
FlushConsoleInputBuffer
FreeLibrary
AllocConsole
GetCommandLineW
GetModuleHandleA
CreateEventA
SetEvent
CreateThread
CloseHandle
ReleaseMutex
CreateMutexA
WaitForSingleObject
VirtualAllocEx
VirtualFreeEx
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetSystemInfo
Sleep
GetModuleFileNameA
lstrlenA
lstrcmpA
FindNextFileA
FindClose
GetLastError
FindFirstFileA
ExpandEnvironmentStringsW
GetEnvironmentVariableW
IsDBCSLeadByteEx
GetCPInfoExA
IsValidCodePage
InterlockedExchangeAdd
InterlockedCompareExchange
GetLocaleInfoA
GetThreadLocale
LocalFree
FormatMessageW
GetVersion
LocalAlloc
InterlockedExchange
RaiseException
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateSemaphoreA
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
ole32
CoCreateInstance
CoInitializeEx
msvcp100
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_BADOFF@std@@3_JB
?max@?$numeric_limits@H@std@@SAHXZ
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
msvcr100
_exit
wcschr
strerror
localeconv
strtod
bsearch
_endthreadex
abort
strcat
memcpy
strcpy
strlen
strtol
memset
strcmp
wcslen
_wcsnicmp
_unlink
_strnicmp
__argc
__argv
_itow
clock
longjmp
_localtime64_s
setvbuf
_wfopen
_fseeki64
calloc
_beginthreadex
_wcsdup
freopen
_ltoa
atol
??0exception@std@@QAE@XZ
strtoul
_errno
isalnum
fopen_s
_vsnprintf_s
_mktime64
mbsrtowcs
wctob
strpbrk
towupper
wcrtomb
mbrtowc
___mb_cur_max_func
towlower
getenv
strnlen
realloc
ceil
_localtime64
_stat64i32
_mkdir
strstr
exit
_stricmp
isdigit
atoi
memchr
_vscprintf
puts
strrchr
ferror
isalpha
tolower
strncat
_vsnprintf
_snprintf
_fileno
_chsize
vsprintf
fwrite
isspace
vprintf
toupper
fgets
strchr
fputs
malloc
free
strncmp
sscanf
feof
sscanf_s
sprintf
fprintf
__iob_func
??_V@YAXPAX@Z
vfprintf
fgetc
fflush
fputc
_time64
srand
rand
fclose
fseek
ftell
fread
fopen
strncpy
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
printf
clearerr
_fdopen
_CIsqrt
_CIatan2
_CIsin
_CIcos
_CIfmod
_CIacos
_unlock
__dllonexit
_lock
_onexit
__CxxFrameHandler3
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
_strdup
_chdir
_access
_getcwd
_itoa
_write
_getpid
_setjmp3
__libm_sse2_logf
_except_handler3
__libm_sse2_cos
__libm_sse2_sin
__libm_sse2_pow
_CxxThrowException
__libm_sse2_tan
__libm_sse2_atan2
floor
strftime
Exports
Exports
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 571KB - Virtual size: 570KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 354KB - Virtual size: 100.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ