Static task
static1
Behavioral task
behavioral1
Sample
Maestro Piano.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Maestro Piano.exe
Resource
win10v2004-20230915-en
General
-
Target
Maestro Piano.exe
-
Size
29.1MB
-
MD5
f25566f0e630fad4cb1bb3df55f324cd
-
SHA1
96d4bc966e0aa074594786347c803e799403dbb7
-
SHA256
96867b37892b3605da89426ac42751b3822de8dd12895cd5c37d0b8a914a28c2
-
SHA512
ff29b4ce023bfd0bf700be1b43b2d5f5b46136cb4d5c2f99ce883c7ffb8d234064811bbe2787da13d2d59c46efc22011343ff8333ccccc225caad942023345a7
-
SSDEEP
786432:FE3RlRIH363DV893hGv8VD7NeunMSWiZute4uUMgy9fvxb:FuI38DVSxGvmD7NbM2Z2n7MB9xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Maestro Piano.exe
Files
-
Maestro Piano.exe.exe windows:5 windows x86
5d8bc40e0216137d2e678dd469234954
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetCommandLineW
WideCharToMultiByte
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
shell32
CommandLineToArgvW
love
love_version
luaopen_love
love_codename
lua51
lua_close
lua_tonumber
lua_pushstring
lua_pushboolean
lua_isnumber
lua_pushcclosure
lua_getfield
lua_createtable
lua_setfield
lua_rawseti
lua_call
luaL_openlibs
luaL_newstate
lua_settop
msvcr110
__iob_func
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_controlfp_s
_invoke_watson
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtSetUnhandledExceptionFilter
??2@YAPAXI@Z
??3@YAXPAX@Z
printf
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
?terminate@@YAXXZ
fprintf
sdl2
SDL_SetMainReady
SDL_iconv_string
SDL_wcslen
SDL_isspace
SDL_malloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ