D:\Программирование\CPP\DS4 emulator\Release\DS4Emulator.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DS4Emulator.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DS4Emulator.exe
Resource
win10v2004-20240426-en
General
-
Target
DS4Emulator.exe
-
Size
436KB
-
MD5
1862af11ef907c4403d9a2f3a082e9ed
-
SHA1
b5dc497d12b5cc1ba2215d311e6b5318129b5191
-
SHA256
4aa05f493e848a25f033c6454536d722c38ab27d5d8ced84db5c9c2d4ff0cb66
-
SHA512
6f3d7b063b5d0a4635ad16efdcee30e5552013b0701d80e91043625305d50f5c1baee6b39a1133d90a0f67a410191b7d9a46ca350c5f1e0b8e7ddc7266f77d18
-
SSDEEP
12288:YCZhM3Bmen6VAxCnaXMv5aMLB0deF4ssIzOqBiliju/HR:Y/Btn6ICnakB0tss6N/jA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DS4Emulator.exe
Files
-
DS4Emulator.exe.exe windows:6 windows x86 arch:x86
e2497958876ee40b0debbe280465c027
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
FindFirstFileA
SetConsoleTitleA
FindNextFileA
FindClose
Sleep
GetModuleHandleExA
LoadLibraryA
GetProcAddress
FreeLibrary
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapReAlloc
ReadConsoleW
ReadFile
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
DeviceIoControl
CreateFileW
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
GetOverlappedResult
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
WaitForSingleObject
RtlUnwind
RaiseException
ExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
user32
SetActiveWindow
GetCursorPos
SetCursorPos
SetForegroundWindow
FindWindowA
SetSystemCursor
GetForegroundWindow
GetAsyncKeyState
LoadCursorFromFileA
ShowWindow
IsWindowVisible
SetWindowPos
LoadCursorA
CopyIcon
GetSystemMetrics
wsock32
WSACleanup
inet_ntoa
htons
recvfrom
socket
WSAStartup
closesocket
bind
setupapi
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
Sections
.text Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ