719516659949e9df162e77a8b9c580f0519b7ab191e09669bf5bd966f429f8d0

Sharing

Copy URL Twitter E-mail

General

Target

719516659949e9df162e77a8b9c580f0519b7ab191e09669bf5bd966f429f8d0
Size

3.0MB
MD5

1c5152d3596b8a1d0ec36b73285b3882
SHA1

d72fd23dad163bcb33c4326e9fe88d58d4eca3ae
SHA256

719516659949e9df162e77a8b9c580f0519b7ab191e09669bf5bd966f429f8d0
SHA512

413e73a7089acdba19105d6fbd24072b30d8fccec199a2db2d9d248cb70473f7ce7615a8d290f4ff80de9814f7ee58e2e96243019cd009bea7055899364a8375
SSDEEP

49152:w7GS1wLSTTAhAFajAkbxLcek9AC3jA4vE1OBTQUlWddOeOOqlrh+nBTNI7RPmTjW:wBFajACcBTQUMddOlNN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
719516659949e9df162e77a8b9c580f0519b7ab191e09669bf5bd966f429f8d0

Files

719516659949e9df162e77a8b9c580f0519b7ab191e09669bf5bd966f429f8d0
.exe windows:6 windows x86 arch:x86

b6aa595061b30e2d55df0eec648d5065

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Code\Dosbox-Rendition\trunk\dosbox\visualc_net\Release\dosbox.pdb

Imports

opengl32

glBindTexture
glTexParameteri
glTexSubImage2D
glVertex2f
glViewport
glCallList
glClear
glClearColor
glDeleteLists
glDeleteTextures
glDisable
glDrawArrays
glEnable
glEnd
glBegin
glEndList
glTexCoord2f
glShadeModel
glNewList
glMatrixMode
glLoadIdentity
glIsList
glGetString
glGetIntegerv
glGetError
glGenTextures
glGenLists
glTexImage2D

winmm

midiOutGetDevCapsA
midiOutShortMsg
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutClose
midiOutOpen
midiOutGetNumDevs
midiOutLongMsg
mciGetErrorStringA
mciSendCommandA

sdl

SDL_JoystickOpen
SDL_JoystickName
SDL_GetKeyName
SDL_Quit
SDL_QuitSubSystem
SDL_InitSubSystem
SDL_Init
SDL_WaitEvent
SDL_PollEvent
SDL_JoystickUpdate
SDL_NumJoysticks
SDL_ShowCursor
SDL_WM_GrabInput
SDL_WM_SetIcon
SDL_WM_SetCaption
SDL_GL_SwapBuffers
SDL_GL_SetAttribute
SDL_GL_GetProcAddress
SDL_FreeYUVOverlay
SDL_DisplayYUVOverlay
SDL_UnlockYUVOverlay
SDL_LockYUVOverlay
SDL_JoystickNumHats
SDL_FillRect
SDL_UpperBlit
SDL_SetAlpha
SDL_UnlockSurface
SDL_LockSurface
SDL_FreeSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateRGBSurface
SDL_MapRGB
SDL_SetPalette
SDL_Flip
SDL_UpdateRects
SDL_SetVideoMode
SDL_VideoModeOK
SDL_GetVideoInfo
SDL_VideoDriverName
SDL_GetModState
SDL_CloseAudio
SDL_GetError
SDL_DestroyMutex
SDL_mutexV
SDL_mutexP
SDL_CreateMutex
SDL_CDClose
SDL_CDEject
SDL_CDStop
SDL_CDResume
SDL_CDPause
SDL_CDPlay
SDL_CDStatus
SDL_CDOpen
SDL_CDName
SDL_CDNumDrives
SDL_Delay
SDL_GetTicks
SDL_JoystickNumButtons
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetHat
SDL_JoystickGetButton
SDL_JoystickClose
SDL_OpenAudio
SDL_PauseAudio
SDL_LockAudio
SDL_UnlockAudio
SDL_PushEvent
SDL_JoystickNumAxes
SDL_SetModuleHandle
SDL_strlcat
SDL_strlcpy
SDL_getenv
SDL_CreateYUVOverlay

kernel32

RemoveDirectoryW
CreateDirectoryW
DeleteFileW
OutputDebugStringW
GetProcessHeap
FindNextFileW
FindFirstFileExW
HeapReAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
MoveFileExW
SetStdHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
HeapAlloc
HeapFree
GetFullPathNameW
SetEndOfFile
GetCommandLineW
GetCommandLineA
GetStdHandle
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetTimeZoneInformation
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
CompareStringEx
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
GetFileAttributesExW
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
GetTempPathW
SetFileInformationByHandle
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
QueryPerformanceFrequency
QueryPerformanceCounter
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
GetLocaleInfoEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
VirtualAlloc
CreateFileA
GetDriveTypeA
CloseHandle
DeviceIoControl
ResetEvent
WaitForSingleObject
CreateEventA
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
GetVolumeInformationA
SetEvent
Sleep
GetCurrentProcess
SetPriorityClass
AllocConsole
FreeConsole
SetConsoleCtrlHandler
SetConsoleTitleA
WriteFile
GetLastError
SetLastError
LocalFree
ClearCommBreak
ClearCommError
EscapeCommFunction
GetCommModemStatus
GetCommState
SetCommState
SetCommTimeouts
FormatMessageA
FindClose
FindFirstFileA
FindNextFileA
GetModuleHandleA
DisconnectNamedPipe
CreateEventW
TerminateProcess
CreateProcessW
GetModuleFileNameW
GetModuleFileNameA
EnterCriticalSection
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
GetCurrentThreadId
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeProcess
HeapSize
WriteConsoleW
CloseThreadpoolTimer
GetLocalTime
WideCharToMultiByte

user32

MessageBoxA
SystemParametersInfoA
GetSystemMetrics
GetKeyboardLayout
wsprintfA
MessageBoxW
GetKeyboardLayoutNameA

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 28.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6aa595061b30e2d55df0eec648d5065

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opengl32

winmm

sdl

kernel32

user32

advapi32

shell32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 254KB - Virtual size: 254KB

.data Size: 168KB - Virtual size: 28.1MB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 168KB - Virtual size: 167KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 254KB - Virtual size: 254KB

.data
Size: 168KB - Virtual size: 28.1MB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 168KB - Virtual size: 167KB