Static task
static1
Behavioral task
behavioral1
Sample
Midi to Qwerty.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Midi to Qwerty.exe
Resource
win10v2004-20240802-en
General
-
Target
Midi to Qwerty.exe
-
Size
633KB
-
MD5
daccc6a58f6c2417af857515fc652801
-
SHA1
4eedec65a5d5cc7f564ba4d61e92d4689ec09e0b
-
SHA256
fdc2e3f71edf456bfb5ff0e9d40a37455e928ba3cc47c84fbc839481ba5f5202
-
SHA512
6f612d2feca403a0c59ae0dd6e14599d32a97cb3d9fea14aedd4f79ed0a158bd71b535d8e36434cf07f505e75ea4e8b10e23af3d14e10c1188872bebec5d1e18
-
SSDEEP
12288:XCSqsbdmp6WTL7+MGBolVhatpL1CUn9X5Gp:y64p1TL7+FBolVhaH1CUn8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Midi to Qwerty.exe
Files
-
Midi to Qwerty.exe.exe windows:6 windows x64 arch:x64
c9e6a018beb35574f39f87d9c85097f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
portmidi
Pm_GetDefaultInputDeviceID
Pt_Stop
Pt_Start
Pm_Poll
Pm_Read
Pm_Close
Pm_OpenInput
Pm_GetErrorText
Pm_Initialize
Pm_GetDeviceInfo
Pm_CountDevices
sdl2
SDL_SetClipboardText
SDL_GetClipboardText
SDL_GetCurrentVideoDriver
SDL_GetWindowFlags
SDL_GL_GetDrawableSize
SDL_GetKeyboardFocus
SDL_GetGlobalMouseState
SDL_WarpMouseInWindow
SDL_CaptureMouse
SDL_CreateSystemCursor
SDL_SetCursor
SDL_FreeCursor
SDL_ShowCursor
SDL_GameControllerOpen
SDL_GL_SwapWindow
SDL_GameControllerGetAxis
SDL_GameControllerGetButton
SDL_SetHint
SDL_GetRendererOutputSize
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetWindowWMInfo
SDL_GetError
SDL_CreateWindow
SDL_GetWindowID
SDL_SetWindowPosition
SDL_GetWindowPosition
SDL_SetWindowSize
SDL_GetWindowSize
SDL_OpenAudioDevice
SDL_memset
SDL_Quit
SDL_Init
SDL_PollEvent
SDL_GetMouseState
SDL_GL_DeleteContext
SDL_free
SDL_GL_SetSwapInterval
SDL_GL_MakeCurrent
SDL_GL_CreateContext
SDL_GL_SetAttribute
SDL_DestroyWindow
SDL_SetWindowOpacity
SDL_SetWindowAlwaysOnTop
SDL_SetWindowBordered
kernel32
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalFree
FormatMessageA
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetCurrentProcessId
GetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
RtlVirtualUnwind
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
CloseHandle
InitializeSListHead
SetEvent
RtlLookupFunctionEntry
user32
GetKeyboardLayout
VkKeyScanExA
SendInput
MapVirtualKeyA
MapVirtualKeyExA
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
msvcp140
_Query_perf_counter
_Query_perf_frequency
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_function_call@std@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?uncaught_exceptions@std@@YAHXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_Xtime_get_ticks
_Cnd_init_in_situ
imm32
ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext
vcruntime140
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcmp
__current_exception_context
__current_exception
__C_specific_handler
memchr
strstr
memset
memmove
memcpy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_exit
_initialize_onexit_table
terminate
_register_onexit_function
_configure_narrow_argv
_initialize_narrow_environment
_crt_atexit
_cexit
_c_exit
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_beginthreadex
_initterm
abort
_initterm_e
exit
_errno
_register_thread_local_exe_atexit_callback
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
_wfopen
fread
fseek
__stdio_common_vsprintf
__stdio_common_vfprintf_s
__stdio_common_vsscanf
fgets
fclose
fopen_s
ftell
fwrite
__p__commode
puts
__acrt_iob_func
_set_fmode
__stdio_common_vfprintf
setvbuf
fflush
freopen_s
api-ms-win-crt-math-l1-1-0
ceilf
sqrtf
acosf
__setusermatherr
cosf
sinf
atan2f
log
logf
pow
powf
fmodf
api-ms-win-crt-convert-l1-1-0
atof
strtol
api-ms-win-crt-string-l1-1-0
strncpy
toupper
strcmp
strncmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
Sections
.text Size: 381KB - Virtual size: 381KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ