d:\Work\Previous\overture\redist\Penumbra.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Penumbra.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Penumbra.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Penumbra.exe
Resource
win10v2004-20240802-en
General
-
Target
Penumbra.exe
-
Size
2.6MB
-
MD5
2da6a65bba158f6338359289a0c83d76
-
SHA1
d33c2747fba98448c6e352cdc0e489231550dc40
-
SHA256
ab93df7da5d7cb259e23656bc05b69c1224728fb42cd5810011c4b9fcccfabb9
-
SHA512
1e858a6668f4fe1b3a3b69f04db7e270145de85453e3c85e0090c8fc5a784c9c61511f31c72b7652152db988a8ccf17af7e9ac96322e742bf81ef1ff16f478a1
-
SSDEEP
49152:b3EUJKpMU/CD+FZZLZdA8v5tX+QPlBkjno4:b0UAm6BzpZdjz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Penumbra.exe
Files
-
Penumbra.exe.exe windows:4 windows x86 arch:x86
4b4a37e45d4599c025e4c84994d94d9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wsock32
select
__WSAFDIsSet
comctl32
_TrackMouseEvent
kernel32
GlobalAlloc
CopyFileW
CreateDirectoryW
GetFileAttributesW
GetLastError
GetModuleHandleA
GetVersionExA
GetProcAddress
lstrcpynA
GlobalLock
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
GlobalUnlock
LeaveCriticalSection
FreeLibrary
LoadLibraryA
user32
OpenClipboard
ShowWindow
GetParent
CloseClipboard
SetClipboardData
EmptyClipboard
GetClipboardData
GetForegroundWindow
MessageBoxW
MessageBoxA
SetForegroundWindow
WindowFromPoint
PostThreadMessageA
MessageBeep
FillRect
GetSysColor
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
ReleaseDC
GetDC
IsIconic
OpenIcon
BringWindowToTop
SetWindowTextA
KillTimer
SetTimer
ClientToScreen
SetCapture
ReleaseCapture
PostQuitMessage
GetUpdateRgn
ValidateRgn
GetAsyncKeyState
GetKeyState
SetCursor
InvalidateRect
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
RegisterWindowMessageA
CreateWindowExA
SetWindowPos
GetWindowLongA
AdjustWindowRectEx
GetSystemMetrics
GetCursorPos
SystemParametersInfoA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetClipboardOwner
PostMessageA
DestroyWindow
gdi32
SetDIBitsToDevice
ExtCreatePen
Pie
CreateBitmap
PolyPolygon
Polyline
Arc
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreatePalette
SelectPalette
RealizePalette
CreateSolidBrush
GetStockObject
CreatePen
EqualRgn
GetRgnBox
RectInRegion
SelectClipRgn
Polygon
SetPixel
MoveToEx
LineTo
SetTextColor
TextOutA
CreateFontA
SelectObject
GetTextMetricsA
GetCharWidthA
GetClipBox
GetDCOrgEx
RestoreDC
SaveDC
SetTextAlign
SetBkMode
UpdateColors
CreateRectRgn
CombineRgn
DeleteObject
GdiFlush
shell32
ShellExecuteW
DragQueryFileA
SHGetFolderPathW
ole32
OleInitialize
OleUninitialize
DoDragDrop
ReleaseStgMedium
RegisterDragDrop
msvcp71
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?push_back@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXG@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?_Nomemory@std@@YAXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
msvcr71
isalpha
isalnum
strncmp
strchr
_CIpow
fwrite
printf
_filelength
_wfindnext
_wfindfirst
ceil
realloc
strlen
memcpy
isdigit
isxdigit
isupper
memset
strcmp
abs
_strdup
strcat
strcpy
localeconv
pow
log
_putenv
_stricmp
getenv
memcmp
strtol
strrchr
strncpy
fabs
sin
cos
sqrt
_callnewh
??1type_info@@UAE@XZ
strtoul
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_vsnprintf
_CIfmod
strtod
__security_error_handler
_purecall
??3@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
sprintf
toupper
floor
?swprintf@@YAHPAGIPBGZZ
_CIacos
rand
srand
time
mbstowcs
wcstombs
tolower
atoi
atof
fclose
_wfopen
?vswprintf@@YAHPAGIPBGPAD@Z
_wremove
gmtime
_wstat
localtime
fflush
fprintf
exit
vsprintf
free
malloc
_snprintf
fputc
sscanf
fread
ftell
fseek
fopen
??_V@YAXPAX@Z
isspace
sdl
SDL_GetTicks
SDL_Delay
SDL_Quit
SDL_SetAlpha
SDL_GetError
SDL_Init
SDL_WM_GrabInput
SDL_PollEvent
SDL_ShowCursor
SDL_SetGamma
SDL_GL_SwapBuffers
SDL_GetGammaRamp
SDL_SetVideoMode
SDL_GL_SetAttribute
SDL_SaveBMP_RW
SDL_RWFromFile
SDL_UnlockSurface
SDL_LockSurface
SDL_SetGammaRamp
SDL_mutexP
SDL_mutexV
SDL_DestroyMutex
SDL_WaitThread
SDL_CreateMutex
SDL_CreateThread
SDL_FreeSurface
SDL_FillRect
SDL_MapRGBA
SDL_CreateRGBSurface
SDL_UpperBlit
SDL_GetRelativeMouseState
SDL_PumpEvents
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_WM_SetCaption
newton
NewtonCorkscrewGetJointAngle
NewtonConstraintCreateCorkscrew
NewtonCorkscrewSetUserCallback
NewtonCorkscrewCalculateStopAccel
NewtonCorkscrewGetJointForce
NewtonCorkscrewGetJointVeloc
NewtonCorkscrewGetJointPosit
NewtonConstraintCreateSlider
NewtonSliderSetUserCallback
NewtonSliderCalculateStopAccel
NewtonSliderGetJointForce
NewtonSliderGetJointVeloc
NewtonSliderGetJointPosit
NewtonConstraintCreateHinge
NewtonJointSetUserData
NewtonHingeSetUserCallback
NewtonJointGetUserData
NewtonHingeCalculateStopAlpha
NewtonHingeGetJointForce
NewtonHingeGetJointOmega
NewtonHingeGetJointAngle
NewtonConstraintCreateBall
NewtonBallGetJointForce
NewtonBallGetJointOmega
NewtonBallGetJointAngle
NewtonBallSetConeLimits
NewtonJointGetStiffness
NewtonJointSetStiffness
NewtonJointGetCollisionState
NewtonJointSetCollisionState
NewtonDestroyJoint
NewtonReleaseCollision
NewtonCreateNull
NewtonCreateBox
NewtonCreateSphere
NewtonCreateCylinder
NewtonCreateCapsule
NewtonCreateCompoundCollision
NewtonCreateTreeCollision
NewtonTreeCollisionBeginBuild
NewtonTreeCollisionAddFace
NewtonTreeCollisionEndBuild
NewtonMaterialSetDefaultFriction
NewtonMaterialSetDefaultElasticity
NewtonMaterialSetContinuousCollisionMode
NewtonMaterialSetCollisionCallback
NewtonMaterialGetContactNormalSpeed
NewtonMaterialGetContactTangentSpeed
NewtonMaterialGetContactForce
NewtonMaterialGetContactPositionAndNormal
NewtonMaterialCreateGroupID
NewtonCreateBody
NewtonBodySetForceAndTorqueCallback
NewtonBodySetTransformCallback
NewtonBodySetUserData
NewtonBodyAddForce
NewtonBodyAddBuoyancyForce
NewtonBodyAddTorque
NewtonBodyForEachPolygonDo
NewtonBodyGetCentreOfMass
NewtonConvexCollisionCalculateInertialMatrix
NewtonBodySetMassMatrix
NewtonBodyGetMassMatrix
NewtonBodyGetOmega
NewtonBodyGetVelocity
NewtonBodySetMatrix
NewtonBodyGetContinuousCollisionMode
NewtonBodySetContinuousCollisionMode
NewtonBodySetFreezeTreshold
NewtonBodyGetAutoFreeze
NewtonBodySetAutoFreeze
NewtonBodyGetSleepingState
NewtonWorldUnfreezeBody
NewtonWorldFreezeBody
NewtonAddBodyImpulse
NewtonBodySetCentreOfMass
NewtonBodyGetAngularDamping
NewtonBodySetAngularDamping
NewtonBodyGetLinearDamping
NewtonBodySetLinearDamping
NewtonBodySetOmega
NewtonBodySetVelocity
NewtonBodySetMaterialGroupID
NewtonDestroyBody
NewtonCreate
NewtonCollisionCollide
NewtonUpdate
NewtonWorldRayCast
NewtonSetWorldSize
NewtonBodyGetUserData
NewtonSetSolverModel
NewtonSetFrictionModel
NewtonDestroy
libvorbisfile
ov_time_tell
ov_pcm_seek_page_lap
ov_open_callbacks
ov_info
ov_pcm_total
ov_time_total
ov_read
ov_clear
alut
alutGetError
alutLoadWAVFile
alutUnloadWAV
openal32
alDeleteBuffers
alGenBuffers
alcMakeContextCurrent
alListenerf
alListenerfv
alDistanceModel
alcCloseDevice
alcDestroyContext
alcGetString
alcIsExtensionPresent
alcGetIntegerv
alGetString
alIsExtensionPresent
alcCreateContext
alcOpenDevice
alDeleteSources
alGenSources
alGetError
alcGetError
alcGetContextsDevice
alcGetCurrentContext
alGetProcAddress
alGetBufferi
alIsSource
alGetSourcei
alSourceQueueBuffers
alSourceUnqueueBuffers
alSourcePlay
alSourceStop
alSourcePause
alSourcefv
alSourcef
alGetSourcef
alSourcei
alIsBuffer
alBufferData
alSource3i
sdl_image
IMG_Load
opengl32
glTexCoord3f
glDisable
glTexParameteri
glBindTexture
glEnable
glTexParameterf
glDeleteTextures
glTexImage2D
glTexImage1D
glGetError
glGenTextures
glDisableClientState
glEnableClientState
glLoadIdentity
glMatrixMode
glClear
glClearStencil
glHint
glDepthFunc
glClearDepth
glClearColor
glShadeModel
glGetFloatv
glGetIntegerv
glOrtho
glTexEnvfv
glColor4f
glEnd
glVertex3f
glTexCoord2f
glBegin
glFlush
glColorMask
glDepthMask
glCullFace
glFrontFace
glGetString
wglGetProcAddress
wglDeleteContext
wglCreateContext
wglShareLists
glLoadMatrixf
glClipPlane
glCopyTexSubImage2D
glDrawElements
glBlendFunc
glStencilFunc
glStencilOp
glAlphaFunc
glTexEnvi
glScalef
glRotatef
glTranslatef
glPopMatrix
glPushMatrix
glFinish
glReadBuffer
glReadPixels
wglGetCurrentContext
wglGetCurrentDC
glVertexPointer
glColorPointer
glNormalPointer
wglMakeCurrent
glTexCoordPointer
glScissor
glTexSubImage2D
glu32
gluBuild2DMipmaps
gluBuild1DMipmaps
cg
cgGetParameterName
cgGetParameterSemantic
cgGetParameterClass
cgGetFirstParameter
cgGetLastListing
cgCreateProgramFromFile
cgGetErrorString
cgGetError
cgGetParameterType
cgGetNamedParameter
cgCreateContext
cgDestroyContext
cgDestroyProgram
cgGetNextParameter
cgGetProfileString
cggl
cgGLGetLatestProfile
cgGLEnableProfile
cgGLBindProgram
cgGLDisableProfile
cgGLDisableTextureParameter
cgGLEnableTextureParameter
cgGLSetTextureParameter
cgGLSetParameter1f
cgGLSetParameter2f
cgGLSetParameter3f
cgGLSetParameter4f
cgGLSetMatrixParameterfr
cgGLSetStateMatrixParameter
cgGLIsProfileSupported
cgGLLoadProgram
cgGLSetOptimalOptions
sdl_ttf
TTF_FontHeight
TTF_RenderGlyph_Blended
TTF_Quit
TTF_Init
TTF_GlyphMetrics
TTF_CloseFont
TTF_OpenFont
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 340KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ