E:\maker\PocoMaker_III\CODE2\Release\PocoZinePlayer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83.exe
Resource
win10v2004-20240508-en
General
-
Target
feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83
-
Size
3.2MB
-
MD5
cb39bbcd42865f3de9a7adeb0f0c02bb
-
SHA1
1cf3aa5d455c586fd14714ee1e6c50be54e0bec8
-
SHA256
feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83
-
SHA512
2ab4a8fcdbf687bce2ae645d089368397889591be09a79935d396265883dd859b46d700662aa61806788fab4c9bb7418f4158bd9b3540db753bb83c5ca70bf3e
-
SSDEEP
49152:Tft++k9PPhbYplbA3Tu0hZE7wQ5krqpTcI8/dAMaenGI6yMh:TF+vPOAqwZE7wQY8AIaAEnG39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83
Files
-
feacaaed5103834a90dd729adb750707b28ac2da66d06c07935d14aa67c04e83.exe windows:4 windows x86 arch:x86
0806754c293999cb8a45bb24f7671a02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetSystemInfo
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
GetLastError
TerminateProcess
OpenProcess
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleFileNameA
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
CreateFileA
GetProcAddress
SetFilePointer
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetTickCount
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsBadWritePtr
HeapCreate
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetCurrentProcess
ExitProcess
RtlUnwind
HeapSize
HeapDestroy
VirtualProtect
ReadFile
VirtualFree
user32
SetTimer
SetWindowTextA
RegisterClassA
DefWindowProcA
KillTimer
MessageBoxA
CreateWindowExA
LoadCursorA
RegisterClassExA
IsWindow
UnregisterClassA
LoadIconA
CopyRect
GetClientRect
GetClassNameA
GetWindowLongA
SetWindowLongA
UpdateWindow
PostQuitMessage
SetWindowPos
PostMessageA
GetWindowRect
MoveWindow
EqualRect
BeginPaint
EndPaint
LockWindowUpdate
IsIconic
ShowWindow
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
ReleaseDC
GetDC
SetFocus
GetFocus
SetCapture
ReleaseCapture
RedrawWindow
gdi32
GetDeviceCaps
GetStockObject
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoGetMalloc
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
urlmon
CreateURLMoniker
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 856KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ