nestopia[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

nestopia.exe
Size

1.8MB
MD5

5a2e126b02be28e020e54c5334d2d733
SHA1

fbeafdd432f646e8922310b8e231f5567151a064
SHA256

7b712bbb1d61c24d2e548ce66dd3844b9057a7c6304d9c738cc484bb5b3a7443
SHA512

b0fd8b9ba1c3542fd12566bc8d263fd4f9d71331e2f3c984bf631bb8612fc32719b8a16020f0b633d17ee07778227e5b3786ac20fb85efb45cfb29b6a29f4d4c
SSDEEP

24576:EHRm4D7+PZMi0aQuvzkZvzSll50en5G/NmK0rBL1EqpAHCwkmfTCqrpUesH+Y+rg:El8ZZAZvWFGqpjmfTlrpUT+hzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nestopia.exe

Files

nestopia.exe
.exe windows:5 windows x86 arch:x86

2d8cd2c42c45b7197c81f22854b920fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetUserDefaultLangID
HeapFree
HeapAlloc
HeapReAlloc
EncodePointer
DecodePointer
ExitThread
ResumeThread
CreateThread
GetCommandLineA
HeapSetInformation
HeapCreate
ExitProcess
GetStdHandle
RaiseException
IsProcessorFeaturePresent
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsSetValue
TlsFree
SetLastError
RtlUnwind
GetModuleFileNameA
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetConsoleCP
GetConsoleMode
SetStdHandle
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
GetModuleHandleA
CreateFileA
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLocalTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetEvent
GetSystemInfo
LockResource
SizeofResource
LoadResource
GlobalUnlock
GlobalLock
CloseHandle
FlushFileBuffers
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
GetFileSize
WaitForSingleObject
SetThreadPriority
GetCurrentThread
GetTickCount
FindClose
LocalFree
GetCurrentThreadId
GetLastError
Sleep
GetProcessHeap
FreeLibrary
TlsAlloc
GetCommandLineW

user32

GetDlgCtrlID
ShowScrollBar
GetForegroundWindow
GetSysColorBrush
GetKeyState
GetCursorPos
EnumThreadWindows
OpenClipboard
CloseClipboard
DestroyCursor
DestroyMenu
SendInput
TranslateMessage
SetWindowPlacement
ScreenToClient
IsZoomed
SetForegroundWindow
GetFocus
GetParent
GetDlgItem
GetWindowTextLengthA
GetWindowPlacement
GetWindowTextA
GetDC
ReleaseDC
GetTopWindow
GetClientRect
AdjustWindowRectEx
GetWindow
UnhookWindowsHookEx
GetActiveWindow
ShowWindow
DestroyAcceleratorTable
GetSubMenu
InvalidateRect
SetWindowPos
GetSystemMetrics
IsWindowVisible
SetWindowTextA
ValidateRect
GetWindowThreadProcessId
GetMenuBarInfo
ClientToScreen
DestroyWindow
GetWindowRect
EndDialog
SetTimer
DeleteMenu
KillTimer
PostQuitMessage
SetCursor
GetMenu
CheckMenuRadioItem
EnableMenuItem
GetMenuState
SetMenu
DrawMenuBar
SetMenuInfo
GetMenuItemCount
CheckMenuItem
SetFocus
IsChild
GetAsyncKeyState
LockWindowUpdate
IsWindowEnabled
CallNextHookEx
IsIconic

gdi32

GetDeviceCaps
SetDIBitsToDevice
DeleteObject
SelectObject
Rectangle
CreatePen
GetStockObject
CreateSolidBrush

advapi32

RegCloseKey

shell32

DragQueryPoint
SHGetMalloc
CommandLineToArgvW
DragFinish
SHGetFolderPathW

ole32

CoUninitialize
CoInitializeEx

oleaut32

VariantClear

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

avifil32

AVIStreamSetFormat
AVIFileInit
AVIFileOpenW
AVIFileExit
AVIStreamWrite
AVIFileCreateStreamW
AVIMakeCompressedStream
AVIFileRelease
AVIStreamRelease

msvfw32

ICCompressorChoose
ICCompressorFree

shlwapi

StrStrW
StrStrIW
StrCmpW
StrIsIntlEqualW
SHDeleteKeyW
PathCompactPathExW
StrTrimW

winmm

mmioAscend
mmioSetInfo
mmioDescend
mmioSeek
mmioGetInfo
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
mmioRead
mmioWrite
mmioAdvance
mmioCreateChunk
mmioClose

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec2Hermite
D3DXSaveSurfaceToFileW
D3DXCreateTexture
D3DXCreateFontW

dinput8

DirectInput8Create

dsound

ord3
ord11

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d8cd2c42c45b7197c81f22854b920fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

avifil32

msvfw32

shlwapi

winmm

d3d9

d3dx9_43

dinput8

dsound

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 169KB - Virtual size: 169KB

.data Size: 12KB - Virtual size: 36KB

.rsrc Size: 379KB - Virtual size: 378KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 169KB - Virtual size: 169KB

.data
Size: 12KB - Virtual size: 36KB

.rsrc
Size: 379KB - Virtual size: 378KB