D:\Development\SongManager\Release-x64\SongUserConfig.pdb
Static task
static1
Behavioral task
behavioral1
Sample
56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715.exe
Resource
win10v2004-20240802-en
General
-
Target
56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715
-
Size
251KB
-
MD5
075058f46b674bdc2c21162d2ae9dd9e
-
SHA1
a3487f271a3d25e98f564178c0ceec330f453176
-
SHA256
56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715
-
SHA512
4d5b0f655655e01aeded17ac3e567cdbe4b762bdf55c14618dbf3d4ea4020a472033468474571e369da99eece02f6e643e48e451d0a2e17a5512f0f9eb2b64cf
-
SSDEEP
3072:1C8BsdGh1z+GVPf9oAUbmO69YQhpTIGmk/KsgIz3w7Du7dc2o7b9/8xnnnnn:1CnGhYGVPLYocGV/OIzg7Du7CBb9/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715
Files
-
56f9c7ae7df6ddf287ee0e82f26e08623c60a1133a5cc727ba941a9986ed7715.exe windows:6 windows x64 arch:x64
a5d72d46e73f47f149972a9f43d181f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetModuleFileNameW
GetCommandLineW
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
libfltkplus
?onKeyDown@FXWidget@@UEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onKeyUp@FXWidget@@UEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onShortcut@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?onShow@FXWidget@@UEAAHXZ
?onHide@FXWidget@@UEAAHXZ
?onScroll@FXWidget@@UEAAXHHH@Z
?onHScroll@FXWidget@@UEAAXH@Z
?onVScroll@FXWidget@@UEAAXH@Z
?onScrollUp@FXWidget@@UEAAXXZ
?onScrollDown@FXWidget@@UEAAXXZ
?onScrollLeft@FXWidget@@UEAAXXZ
?onScrollRight@FXWidget@@UEAAXXZ
?onScrollHome@FXWidget@@UEAAXXZ
?onScrollEnd@FXWidget@@UEAAXXZ
?onScrollPageUp@FXWidget@@UEAAXXZ
?onScrollPageDown@FXWidget@@UEAAXXZ
?onScrollPageHome@FXWidget@@UEAAXXZ
?onScrollPageEnd@FXWidget@@UEAAXXZ
?onScrollPageLeft@FXWidget@@UEAAXXZ
?onScrollPageRight@FXWidget@@UEAAXXZ
?draw@Fl_Input@@MEAAXXZ
?handle@FXInputString@@MEAAHH@Z
?resize@Fl_Input_@@UEAAXHHHH@Z
?filterChar@FXInputString@@MEAA_NAEAHHH@Z
?onDraw@FXCheckBox@@MEAAXXZ
?onMouseDown@FXCheckBox@@MEAAHHAEBVFXPoint@@@Z
?draw@FXButton@@MEAAXXZ
?onDraw@FXButton@@MEAAXXZ
?onFocus@FXButton@@MEAAHXZ
?onUnfocus@FXButton@@MEAAHXZ
?onMouseEnter@FXButton@@MEAAHXZ
?onMouseLeave@FXButton@@MEAAHXZ
?onMouseDown@FXButton@@MEAAHHAEBVFXPoint@@@Z
?onMouseUp@FXButton@@MEAAHHAEBVFXPoint@@@Z
?onKeyDown@FXButton@@MEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onKeyUp@FXButton@@MEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onShortcut@FXButton@@MEAAHHAEBVFXPoint@@@Z
?init@FXButton@@MEAAXXZ
??1FXCheckBox@@UEAA@XZ
??1FXInputString@@UEAA@XZ
?GetClientRect@FXWidget@@UEBAXPEAVFXRect@@@Z
?getFolder@FXFolderDialog@@QEAA?AVUtf8String@@XZ
?getItemValue@FXPropertyPage@@QEAAXHAEAH@Z
?getItemValue@FXPropertyPage@@QEAAXHAEAVUtf8String@@@Z
?as_group@Fl_Group@@UEAAPEAV1@XZ
?as_gl_window@Fl_Widget@@UEAAPEAVFl_Gl_Window@@XZ
?as_window@Fl_Widget@@UEAAPEAVFl_Window@@XZ
?as_group@Fl_Widget@@UEAAPEAVFl_Group@@XZ
?resize@FXGroup@@UEAAXHHHH@Z
?getClientRect@FXGroup@@UEBAXAEAVFXRect@@@Z
??0FXNamedInputString@@QEAA@HHAEBVUtf8String@@H0HH0W4FilterMode@FXInputString@@W4CaseMode@3@W4InputType@3@@Z
?draw@FXGroup@@UEAAXXZ
?handle@FXGroup@@UEAAHH@Z
?activate@FXNamedWidget@@UEAAXXZ
?deactivate@FXNamedWidget@@UEAAXXZ
?getMinSize@FXGroup@@UEBA?AVFXSize@@XZ
?getMaxSize@FXGroup@@UEBA?AVFXSize@@XZ
?getWidgetRect@FXGroup@@UEBAXAEAVFXRect@@@Z
?getInnerRect@FXGroup@@UEBAXAEAVFXRect@@@Z
?getContentsRect@FXGroup@@UEBAXAEAVFXRect@@@Z
?getChildrenSize@FXGroup@@UEBA?AVFXSize@@XZ
?getChildrenRect@FXGroup@@UEBAXAEAVFXRect@@@Z
?onTimer@FXGroup@@UEAA_NIPEAX@Z
?onDraw@FXGroup@@UEAAXXZ
?onDrawBorder@FXGroup@@UEAAXXZ
?onDrawBackground@FXGroup@@UEAAXXZ
?onFocus@FXGroup@@UEAAHXZ
?onUnfocus@FXGroup@@UEAAHXZ
?onMouseEnter@FXGroup@@UEAAHXZ
?onMouseLeave@FXGroup@@UEAAHXZ
?onMouseDown@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?onMouseUp@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?onMouseMove@FXGroup@@UEAAHAEBVFXPoint@@@Z
?onMouseDrag@FXGroup@@UEAAHAEBVFXPoint@@@Z
?onMouseWheel@FXGroup@@UEAAHHHAEBVFXPoint@@@Z
?onLeftMouseButton@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?onMiddleMouseButton@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?onRightMouseButton@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?onMouseWheel@FXWidget@@UEAAHHHAEBVFXPoint@@@Z
?onRightMouseButton@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?onPaste@FXGroup@@UEAAHAEBVUtf8String@@AEBVFXPoint@@@Z
?onKeyDown@FXGroup@@UEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onKeyUp@FXGroup@@UEAAHHAEBVUtf8String@@AEBVFXPoint@@@Z
?onCreate@FXPropertyPage@@MEAAXXZ
?onShow@FXGroup@@UEAAHXZ
?onHide@FXGroup@@UEAAHXZ
?onItemCallback@FXNamedWidget@@UEAAXPEAVFl_Widget@@PEAX@Z
?onCommand@FXGroup@@UEAAHI@Z
?onClose@FXGroup@@UEAAXXZ
?onHScroll@FXGroup@@UEAAXH@Z
?onVScroll@FXGroup@@UEAAXH@Z
?draw@Fl_Group@@MEAAXXZ
?onScrollDown@FXGroup@@UEAAXXZ
?onScrollLeft@FXGroup@@UEAAXXZ
?onScrollRight@FXGroup@@UEAAXXZ
?onScrollHome@FXGroup@@UEAAXXZ
?onScrollEnd@FXGroup@@UEAAXXZ
?onScrollPageUp@FXGroup@@UEAAXXZ
?onScrollPageDown@FXGroup@@UEAAXXZ
?onScrollPageHome@FXGroup@@UEAAXXZ
?onScrollPageEnd@FXGroup@@UEAAXXZ
?onScrollPageLeft@FXGroup@@UEAAXXZ
?onScrollPageRight@FXGroup@@UEAAXXZ
?onScroll@FXGroup@@UEAAXHHH@Z
?setValue@FXNamedWidget@@UEAAXAEBVSWValue@@H@Z
?getValue@FXNamedWidget@@UEAA?AVSWValue@@XZ
??1FXNamedInputString@@UEAA@XZ
?GetClientRect@FXGroup@@UEBAXPEAVFXRect@@@Z
??0FXApp@@QEAA@_N@Z
?initInstance@FXApp@@UEAA_NAEBVSWString@@AEBVSWStringArray@@@Z
?doModal@FXPropertySheet@@UEAAHXZ
??1FXPropertySheet@@UEAA@XZ
?runInstance@FXApp@@UEAAXXZ
??1FXApp@@UEAA@XZ
??0FXPropertySheet@@QEAA@HHHHAEBVUtf8String@@PEAVFl_Widget@@H@Z
?addPage@FXPropertySheet@@QEAAXPEAVFXPropertyPage@@@Z
??0Fl_PNG_Image@@QEAA@PEBD@Z
?icon@Fl_Window@@QEAAXPEBVFl_RGB_Image@@@Z
?iconlabel@Fl_Window@@QEAAXPEBD@Z
?label@Fl_Window@@QEAAXPEBD@Z
?xclass@Fl_Window@@QEAAXPEBD@Z
?draw@FXPropertySheet@@UEAAXXZ
?handle@Fl_Window@@UEAAHH@Z
?resize@Fl_Double_Window@@UEAAXHHHH@Z
?show@Fl_Double_Window@@UEAAXXZ
?hide@Fl_Double_Window@@UEAAXXZ
?flush@Fl_Double_Window@@UEAAXXZ
?setSizeAndPosition@Fl_Window@@UEAAXHHHH@Z
?saveWindowState@Fl_Window@@UEAAXAEAVFl_Window_State@@@Z
?restoreWindowState@Fl_Double_Window@@UEAAXAEBVFl_Window_State@@@Z
?endDialog@FXPropertySheet@@UEAAXH@Z
?onApply@FXPropertySheet@@UEAAXXZ
?onOK@FXPropertySheet@@UEAAXXZ
?onCancel@FXPropertySheet@@UEAAXXZ
?setModified@FXPropertySheet@@UEAAXXZ
?loadAllData@FXPropertySheet@@UEAAXXZ
?saveAllData@FXPropertySheet@@UEAAXXZ
?onCallback@FXPropertySheet@@MEAAXPEAVFl_Widget@@@Z
??1Fl_PNG_Image@@UEAA@XZ
?as_window@Fl_Window@@UEAAPEAV1@XZ
??0FXColor@@QEAA@HHHH@Z
?end@Fl_Group@@QEAAXXZ
?NoColor@FXColor@@2V1@B
?resize@FXWidget@@UEAAXHHHH@Z
?getClientRect@FXWidget@@UEBAXAEAVFXRect@@@Z
?handle@FXWidget@@MEAAHH@Z
??0FXPropertyPage@@QEAA@HAEBVUtf8String@@@Z
??1FXPropertyPage@@UEAA@XZ
?getDefaultFont@FXFont@@SA?AV1@XZ
??1FXFont@@UEAA@XZ
?addItem@FXPropertyPage@@QEAAXHPEAVFl_Widget@@@Z
??0FXStaticText@@QEAA@HHHHAEBVUtf8String@@HAEBVFXColor@@1@Z
??0FXColor@@QEAA@PEBD@Z
?fx_default_charSizeX@@YAHN@Z
?fx_default_charSizeY@@YAHN@Z
??0FXInputString@@QEAA@HHHHAEBVUtf8String@@W4FilterMode@0@W4CaseMode@0@W4InputType@0@@Z
?onMouseDrag@FXWidget@@UEAAHAEBVFXPoint@@@Z
?onSize@FXWidget@@UEAAXAEBVFXPoint@@AEBVFXSize@@@Z
?onMouseMove@FXWidget@@UEAAHAEBVFXPoint@@@Z
?onMiddleMouseButton@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?onMouseUp@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?onMouseDown@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?deactivate@Fl_Widget@@UEAAXXZ
?onDragAndDrop@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?activate@Fl_Widget@@UEAAXXZ
?onMouseLeave@FXWidget@@UEAAHXZ
?onMouseEnter@FXWidget@@UEAAHXZ
?onUnfocus@FXWidget@@UEAAHXZ
?onLeftMouseButton@FXWidget@@UEAAHHAEBVFXPoint@@@Z
?onFocus@FXWidget@@UEAAHXZ
?onDrawBackground@FXWidget@@UEAAXXZ
?onDrawBorder@FXWidget@@UEAAXXZ
?onDraw@FXStaticText@@MEAAXXZ
?onCreate@FXWidget@@UEAAXXZ
?onClose@FXWidget@@UEAAXXZ
?onCommand@FXWidget@@UEAAHI@Z
?setCursor@FXWidget@@UEAAXW4Fl_Cursor@@@Z
?setCursor@FXWidget@@UEAAXAEBVFXCursor@@@Z
?onTimer@FXWidget@@UEAA_NIPEAX@Z
?getContentsRect@FXWidget@@UEBAXAEAVFXRect@@@Z
?getInnerRect@FXWidget@@UEBAXAEAVFXRect@@@Z
?getWidgetRect@FXWidget@@UEBAXAEAVFXRect@@@Z
?draw@FXWidget@@MEAAXXZ
?canEnableOK@FXPropertyPage@@MEAA_NXZ
?onCreate@FXGroup@@UEAAXXZ
?onShowPage@FXPropertyPage@@MEAAXXZ
?hide@Fl_Widget@@UEAAXXZ
?setModified@FXPropertyPage@@IEAAXXZ
?doModal@FXFolderDialog@@QEAAHXZ
??1FXFolderDialog@@QEAA@XZ
??0FXFolderDialog@@QEAA@AEBVUtf8String@@0@Z
?show@Fl_Widget@@UEAAXXZ
?onCallback@FXPropertyPage@@MEAAXPEAVFl_Widget@@@Z
?updateData@FXPropertyPage@@QEAAX_N@Z
?value@FXDataExchange@@QEAA_NHAEAHH@Z
?value@FXDataExchange@@QEAA_NHAEAVUtf8String@@H@Z
?enableItem@FXPropertyPage@@QEAAXH_N@Z
??1FXTextButton@@UEAA@XZ
??1FXStaticText@@UEAA@XZ
??0FXCheckBox@@QEAA@AEBVUtf8String@@HHHHHAEBVFXColor@@1@Z
??0FXTextButton@@QEAA@AEBVUtf8String@@AEBVFXFont@@HHHHAEBVFXColor@@22@Z
?resize@Fl_Group@@UEAAXHHHH@Z
?onShortcut@FXGroup@@UEAAHHAEBVFXPoint@@@Z
?handle@Fl_Group@@UEAAHH@Z
?onScrollUp@FXGroup@@UEAAXXZ
libstrings
??1Utf8String@@QEAA@XZ
??4Utf8String@@QEAAAEAV0@AEBV0@@Z
??0Utf8String@@QEAA@PEBDH@Z
libswift
??BSWString@@QEBA?AVUtf8String@@XZ
?concatPaths@SWFilename@@SA?AVSWString@@AEBV2@0W4PathType@1@@Z
??0SWString@@QEAA@PEBD@Z
??1SWString@@UEAA@XZ
??0SWString@@QEAA@AEBVUtf8String@@@Z
??0SWString@@QEAA@PEB_W@Z
??0SWStringArray@@QEAA@_K@Z
??1SWStringArray@@UEAA@XZ
?sw_main_parseCommandLine@@YAXAEBVSWString@@AEAV1@AEAVSWStringArray@@H@Z
?hash@SWObject@@UEBA_KXZ
?lock@SWLockableObject@@UEBAI_K@Z
?lockForReading@SWLockableObject@@UEBAI_K@Z
?lockForWriting@SWLockableObject@@UEBAI_K@Z
?unlock@SWLockableObject@@UEBAIXZ
?c_str@SWString@@QEBAPEBDXZ
?readFromStream@SWObject@@UEAAIAEAVSWInputStream@@@Z
?writeToStream@SWObject@@UEBAIAEAVSWOutputStream@@@Z
?clear@SWObject@@UEAAXXZ
libutil
?getRegistryString@AppConfig@@YA?AVSWString@@AEBV2@00W4SWRegistryHive@@@Z
?getUserDocsDir@AppConfig@@YA?AVSWString@@AEBV2@@Z
?setRegistryString@AppConfig@@YAXAEBVSWString@@00W4SWRegistryHive@@@Z
?removeRegistryValue@AppConfig@@YAXAEBVSWString@@0W4SWRegistryHive@@@Z
?execute@SWApp@@SAHAEAV1@AEBVSWString@@AEBVSWStringArray@@@Z
?exitInstance@SWApp@@UEAAHXZ
?onAppHelp@SWApp@@UEAAXXZ
?showHelp@SWApp@@UEAA_NAEBVSWString@@@Z
?getSettingString@SWApp@@UEAA?AVSWString@@AEBV2@0@Z
?getSettingInteger@SWApp@@UEAAHAEBVSWString@@H@Z
?getSettingBoolean@SWApp@@UEAA_NAEBVSWString@@_N@Z
?getSettingDouble@SWApp@@UEAANAEBVSWString@@N@Z
?startThreads@SWApp@@UEAAXXZ
?stopThreads@SWApp@@UEAAXXZ
?initLogging@SWApp@@UEAAXXZ
?loadLogConfig@SWApp@@UEAAXAEAVSWLogConfig@@@Z
?logConfigChanged@SWApp@@UEAA_NXZ
?checkLogging@SWApp@@UEAAXXZ
?getResourceFile@AppConfig@@YA?AVSWString@@AEBV2@@Z
?getProgramName@AppConfig@@YA?AVSWString@@XZ
songbase
?setSongLicenceInfo@AppConfig@@YAXAEBVUtf8String@@@Z
?init@SongBase@@SAXAEBVSWString@@AEBVSWStringArray@@AEBVUtf8String@@@Z
?getSongLicenceInfo@AppConfig@@YA?AVUtf8String@@XZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
__current_exception_context
__C_specific_handler
_CxxThrowException
__current_exception
memset
__std_exception_copy
memcpy
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_register_onexit_function
_initterm
_initterm_e
exit
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
terminate
_initialize_narrow_environment
_get_narrow_winmain_command_line
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ