c:\projects\kgv1-vfw\release\KGV1-VFW.pdb
Static task
static1
General
-
Target
Fusion364.zip
-
Size
383KB
-
MD5
ff15f7d64011e7cda19a65980b3660a9
-
SHA1
ba845e8d575be91452631143cdfec81d530319b8
-
SHA256
6365101eb417c5c2a5e6609573f354b7b7ea86632cbfd968676a1eec070e0ca3
-
SHA512
0a4930417a7545139b0730a84e455411beb1c1a1bb7bc91fce6732f2716c3a95b842970c382cd923dc4ec2cce76e6ddfca0407a1c6a43ccc4ad3448f20d6b4fc
-
SSDEEP
6144:2DPZXTHywCMDXD7xJqoUU65ZLPT9jm7ANsGCR+KkegffnkXy5X:2DPZjHy5MDX3SDZm8B66fkiZ
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Fusion364/Fusion.exe unpack001/Fusion364/Video Codec/KGV1-VFW.dll
Files
-
Fusion364.zip.zip
-
Fusion364/Fusion.exe.exe windows:4 windows x86 arch:x86
a51208e9ae5fb68f593d2786cee3374e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
socket
WSAStartup
bind
gethostbyname
htons
WSACleanup
recvfrom
sendto
closesocket
msacm32
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose
comctl32
PropertySheetA
ord17
dinput
DirectInputCreateEx
dsound
ord1
ddraw
DirectDrawCreateEx
kernel32
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
HeapSize
WriteConsoleA
GetConsoleOutputCP
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
ResetEvent
Sleep
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExA
DeviceIoControl
GetDriveTypeA
CreateFileA
SetPriorityClass
GetCurrentProcess
GetTickCount
SetEvent
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RaiseException
GetModuleFileNameA
WriteFile
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetFilePointer
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
ReadFile
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetCommandLineA
CreateThread
ResumeThread
ExitThread
GetLocaleInfoA
SetEndOfFile
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ExitProcess
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
RtlUnwind
user32
TrackPopupMenu
EnableMenuItem
CheckMenuItem
LoadIconA
LoadCursorA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
LoadMenuA
GetDesktopWindow
GetMenuItemInfoA
CreatePopupMenu
LoadBitmapA
DrawMenuBar
LoadAcceleratorsA
ShowCursor
GetMessageA
TranslateAcceleratorA
FindWindowExA
SetWindowTextA
DialogBoxParamA
EndDialog
DefWindowProcA
GetWindowRect
GetClientRect
ClientToScreen
ChangeDisplaySettingsA
SetMenu
ShowWindow
UpdateWindow
PostMessageA
GetFocus
PeekMessageA
TranslateMessage
DispatchMessageA
EnableWindow
GetParent
SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
GetDlgItem
SetFocus
SetWindowLongA
GetDlgItemTextA
GetSubMenu
DeleteMenu
InsertMenuItemA
DestroyWindow
PostQuitMessage
EndPaint
BeginPaint
MessageBoxA
SetWindowPos
gdi32
CreateCompatibleBitmap
DeleteObject
DeleteDC
BitBlt
GetDIBits
SelectObject
CreateCompatibleDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
GetUserNameA
shell32
DragFinish
DragQueryFileA
Sections
.text Size: 908KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.6MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Fusion364/History.txt
-
Fusion364/Readme.txt
-
Fusion364/Video Codec/KGV1-VFW.dll.dll windows:4 windows x86 arch:x86
fbb7c1d4a99c24a047b8a600a3c61ea0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
winmm
DefDriverProc
msvcr80
__CppXcptFilter
__clean_type_info_names_internal
_adjust_fdiv
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_unlock
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
Exports
Exports
DriverProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Fusion364/Video Codec/KegaGameVideo.inf