Fusion364(1).zip
- SHA256 6365101eb417c5c2a5e6609573f354b7b7ea86632cbfd968676a1eec070e0ca3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fusion364/Fusion.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fusion364/Fusion.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fusion364/Video Codec/KGV1-VFW.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Fusion364/Video Codec/KGV1-VFW.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Fusion364(1).zip
- Size 383KB
- Sample260924-2f5rxstdlf
- SHA256 6365101eb417c5c2a5e6609573f354b7b7ea86632cbfd968676a1eec070e0ca3
- MD5 ff15f7d64011e7cda19a65980b3660a9
- SHA1 ba845e8d575be91452631143cdfec81d530319b8
- SHA512 0a4930417a7545139b0730a84e455411beb1c1a1bb7bc91fce6732f2716c3a95b842970c382cd923dc4ec2cce76e6ddfca0407a1c6a43ccc4ad3448f20d6b4fc
- SSDEEP 6144:2DPZXTHywCMDXD7xJqoUU65ZLPT9jm7ANsGCR+KkegffnkXy5X:2DPZjHy5MDX3SDZm8B66fkiZ
- TLSH T1828422E9C9D5C517FE97F47E31D38702A2273CC33EF056357C1126AC841ACAA953A9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Fusion364/Fusion.exe unpack001/Fusion364/Video Codec/KGV1-VFW.dll
File Explorer
-
Fusion364(1).zip.zip 383KB
-
Fusion364/Fusion.exe.exe 2.6MB
-
Fusion364/History.txt40KB
-
Fusion364/Readme.txt27KB
-
Fusion364/Video Codec/KGV1-VFW.dll.dll 8KB
-
Fusion364/Video Codec/KegaGameVideo.inf4KB
Fusion364/Fusion.exe
- IMPHASH a51208e9ae5fb68f593d2786cee3374e
- SHA256 66d3205aae58fe8a038c84588a8d008a9dfe5d8f72385979019fdd1c476521a9
- MD5 c7c149e7621e9152af1f672567d606b4
- SHA1 4842ddbfbdfeb909b134f28ce25f02ab59b38453
- SHA512 5c1b4474313f5cb0d3287754639e727fb4dd48e6a4df9c53c507884caf99ca89afd76b02705544732a837b41aca7b5a889fdf4e74f5a8537c599f22d3fea1144
- SSDEEP 12288:3q4tplxDCUlt77RXQzOP/rZRbjLCJM/dSSSSS4LKZWuIm4:3fldZ7RqeHLrPuIm4
- TLSH T1F5D5756807613EB5E1EA287F4CC54252A5DAB74D0674B0BE364CF83D363CF80D5AA58B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
862075
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
ws2_32
select
socket
WSAStartup
bind
gethostbyname
htons
WSACleanup
recvfrom
sendto
closesocket
msacm32
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose
comctl32
PropertySheetA
ord17
dinput
DirectInputCreateEx
dsound
ord1
ddraw
DirectDrawCreateEx
kernel32
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
HeapSize
WriteConsoleA
GetConsoleOutputCP
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
ResetEvent
Sleep
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExA
DeviceIoControl
GetDriveTypeA
CreateFileA
SetPriorityClass
GetCurrentProcess
GetTickCount
SetEvent
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RaiseException
GetModuleFileNameA
WriteFile
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetFilePointer
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
ReadFile
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetCommandLineA
CreateThread
ResumeThread
ExitThread
GetLocaleInfoA
SetEndOfFile
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ExitProcess
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
RtlUnwind
user32
TrackPopupMenu
EnableMenuItem
CheckMenuItem
LoadIconA
LoadCursorA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
LoadMenuA
GetDesktopWindow
GetMenuItemInfoA
CreatePopupMenu
LoadBitmapA
DrawMenuBar
LoadAcceleratorsA
ShowCursor
GetMessageA
TranslateAcceleratorA
FindWindowExA
SetWindowTextA
DialogBoxParamA
EndDialog
DefWindowProcA
GetWindowRect
GetClientRect
ClientToScreen
ChangeDisplaySettingsA
SetMenu
ShowWindow
UpdateWindow
PostMessageA
GetFocus
PeekMessageA
TranslateMessage
DispatchMessageA
EnableWindow
GetParent
SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
GetDlgItem
SetFocus
SetWindowLongA
GetDlgItemTextA
GetSubMenu
DeleteMenu
InsertMenuItemA
DestroyWindow
PostQuitMessage
EndPaint
BeginPaint
MessageBoxA
SetWindowPos
gdi32
CreateCompatibleBitmap
DeleteObject
DeleteDC
BitBlt
GetDIBits
SelectObject
CreateCompatibleDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
GetUserNameA
shell32
DragFinish
DragQueryFileA
Name
.text
Size
908KB
Virtual Size
905KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.6MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=126, version=50327,
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=187, id=1, productName=Unmarked objects,
count=25, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=150, id=109, productName=VS2005 build 50727, version=50727,
count=104, id=110, productName=VS2005 build 50727, version=50727,
count=123, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Fusion364/History.txt
- SHA256 8f47d30afc0f2bce3dba63b374c96fae99c716c698b5596e3153b761cdb7105a
- MD5 6c6f9e6deda67841fbc1cc6a3283a73a
- SHA1 d093686dd00825f92ded8b559422beb1723394e4
- SHA512 93e69f4c8f2d5b7cf11fb5fd40ed387cb94f3da42372a45020e8617247db8ae5ee0317e2bb7bfef6e05dd404e6ede68801142b625f2bab777edb076798d7643b
- SSDEEP 768:bsmHEF5ye8mPI8gmOYh9kyzROIu7ZCUGHFs6/DO3X5nIYf:bYvokkjd6bOl1f
- TLSH T16F03D60B5E47737216B2C151B74AB1AEE71E50BD5BF6523834AF864C331289A827F4EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Fusion364/Readme.txt
- SHA256 f9e1834e2de55b72882b1e6e5792d5606344c4149b29c2cee461cb4439101385
- MD5 ad42394db228ffe8ff76fdc29f1cd964
- SHA1 ed5a32640f72d9c48a6ab17c184e30869d41bc6d
- SHA512 b6de3fbc2188807cb7272aefc39d1d4c2a16e4213ba42ee6ed07b86b206f2f8100efdfdc1544ec2fa5c15f5d96696934c7234941336b7abd137abf290d8e147a
- SSDEEP 768:xhzXr4HPfO4k2X6qJ3V+KPBSv19LO5wCEMq5q7:xhTrkXG2XNrt6y5wvM9
- TLSH T13AC2C54F7F4653320A61D161370DA5D2E739D0BC43B9A261388D912C33269AB83BF9ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Fusion364/Video Codec/KGV1-VFW.dll
- IMPHASH fbb7c1d4a99c24a047b8a600a3c61ea0
- SHA256 8bfce641b6a7cd1f2e9d5ac7e94b1f591fe00255d799980d269fcebff063c98f
- MD5 4e575036b32202131358a957255b4201
- SHA1 ee97db55727ca49dc2c5b14210b36cabc1eea9ff
- SHA512 93bd07f812c4b153fdc36c6db7496d373167b77dcb39a70596144d28522662fb6cb01b6a20c3d0431672a78a2e4cfbd8a5af3a6b5ca13de783d25d88b9b9fe06
- SSDEEP 192:Mc8u9103rmq87gIBQgkqpeToztkdMQk3X7Z6vrkx4:MHu9KMtFzplUMdrZ6y4
- TLSH T19802083ABBCB9673DA4E05B42D675627133EA32213E508BB7FA11ACE8DC55A0D870300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6716
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\kgv1-vfw\release\KGV1-VFW.pdb
winmm
DefDriverProc
msvcr80
__CppXcptFilter
__clean_type_info_names_internal
_adjust_fdiv
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_unlock
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
DriverProc
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
428B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
388B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=34, id=1, productName=Unmarked objects,
count=4, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Fusion364/Video Codec/KegaGameVideo.inf
- SHA256 0e86fbe5edb6ed2ca183014ac5f63f43dfa8eb9c307bbcc07e860c9c1d68ccf5
- MD5 7e69a8c825281a0dd1eaa5a15d6531c0
- SHA1 4e6cbadcf55508ffe82cacba0e4dc37fa77dd8b5
- SHA512 657538cbeeab3fc52a55b4aee9fa31172a3faab2987b36b28cbc5398d60541ea6d5f9529f21377ea1b5117a1ea3c3f497140b8a67b44ad2f2704ded6bd1cfd7f
- SSDEEP 96:MhzcDjPdzWKAjHTpAfBLk9H3NZPlLkhHSKH2Ozm2i:MhzcDjPdajLlihd9z+
- TLSH T16181DE4A7126C472F9213724A24F9B677BAD5E4F10898F0E799FD2439A530CDD04A2CD
- MD5 SHA1 SHA512 SSDEEP TLSH