Static task
static1
Behavioral task
behavioral1
Sample
Midi to Qwerty.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Midi to Qwerty.exe
Resource
win10v2004-20240802-en
General
-
Target
Midi to Qwerty.exe
-
Size
630KB
-
MD5
2e12946d2a56ba32674a2ff8e6316fde
-
SHA1
11989db69dedda234c02146024ab1c5e19777e44
-
SHA256
9067783bf9369640b431f6c147db49d33acfab73d2936f794fdb479650f44524
-
SHA512
7976d666771545edb8427bb9af75433b83c7387b99ae14cc1a822cca94c375e2bf45d41be398cc0967c34bd407d79241d0d1bb3b615c108b06fca02bdab9abdf
-
SSDEEP
6144:mbAzjwWTH8sdiOiMQ7pW6qKqEZ+TUBaECZ/cEzJXJbQuDnwYVOglB0zhUn4pSFAx:m6j9HvdiOiMQ732Uu/NJXNQm6UnaP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Midi to Qwerty.exe
Files
-
Midi to Qwerty.exe.exe windows:6 windows x64 arch:x64
f9d6a9dae3e804f14603fbfe30ec636d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
portmidi
Pm_OpenInput
Pt_Stop
Pt_Start
Pm_Poll
Pm_Read
Pm_Close
Pm_CountDevices
Pm_GetErrorText
Pm_Initialize
Pm_GetDeviceInfo
Pm_GetDefaultInputDeviceID
sdl2
SDL_GetKeyboardFocus
SDL_GetGlobalMouseState
SDL_WarpMouseInWindow
SDL_CaptureMouse
SDL_CreateSystemCursor
SDL_SetCursor
SDL_FreeCursor
SDL_GetPerformanceCounter
SDL_ShowCursor
SDL_GameControllerOpen
SDL_GameControllerGetAxis
SDL_GameControllerGetButton
SDL_SetHint
SDL_GetRendererOutputSize
SDL_GetPerformanceFrequency
SDL_GetWindowWMInfo
SDL_GetWindowFlags
SDL_GetCurrentVideoDriver
SDL_GetClipboardText
SDL_SetClipboardText
SDL_free
SDL_Quit
SDL_Init
SDL_Delay
SDL_GL_GetDrawableSize
SDL_PollEvent
SDL_GetMouseState
SDL_GL_DeleteContext
SDL_GL_SwapWindow
SDL_GL_SetSwapInterval
SDL_GL_MakeCurrent
SDL_GL_CreateContext
SDL_GL_SetAttribute
SDL_DestroyWindow
SDL_SetWindowOpacity
SDL_GetError
SDL_CreateWindow
SDL_GetWindowID
SDL_SetWindowPosition
SDL_GetWindowPosition
SDL_SetWindowAlwaysOnTop
SDL_SetWindowBordered
SDL_SetWindowSize
SDL_GetWindowSize
kernel32
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitOnceComplete
InitOnceBeginInitialize
GetFileInformationByHandleEx
GetLastError
CloseHandle
GetCurrentProcessId
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
FormatMessageA
LocalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
AreFileApisANSI
InitializeSListHead
user32
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
MessageBoxA
MapVirtualKeyExA
MapVirtualKeyA
SendInput
VkKeyScanExA
GetKeyboardLayout
EmptyClipboard
msvcp140
?_Xinvalid_argument@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_function_call@std@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
imm32
ImmGetContext
ImmSetCandidateWindow
ImmReleaseContext
ImmSetCompositionWindow
vcruntime140
__C_specific_handler
memmove
memcpy
memchr
strstr
_purecall
memset
__std_terminate
__std_exception_copy
__current_exception_context
memcmp
__std_exception_destroy
_CxxThrowException
__current_exception
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_c_exit
_configure_narrow_argv
_exit
_initterm_e
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
exit
abort
terminate
_beginthreadex
_register_thread_local_exe_atexit_callback
_initterm
_crt_atexit
_errno
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
fflush
freopen_s
fclose
__p__commode
_set_fmode
setvbuf
__stdio_common_vfprintf
puts
fwrite
ftell
fseek
fread
_wfopen
__acrt_iob_func
fopen_s
__stdio_common_vsprintf
__stdio_common_vfprintf_s
__stdio_common_vsscanf
fgets
api-ms-win-crt-math-l1-1-0
sinf
sqrtf
log
fmodf
atan2f
acosf
logf
pow
cosf
__setusermatherr
powf
ceilf
api-ms-win-crt-convert-l1-1-0
strtol
atof
api-ms-win-crt-string-l1-1-0
strncmp
toupper
strcmp
strncpy
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
Sections
.text Size: 382KB - Virtual size: 381KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ