D:\Sources\foobar2000-2.1\foobar2000\Release\foobar2000.pdb
Static task
static1
Behavioral task
behavioral1
Sample
db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968.exe
Resource
win10v2004-20240802-en
General
-
Target
db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968
-
Size
3.4MB
-
MD5
7f0f3b5c3b5b18ecad09039589fd9f09
-
SHA1
4be320b95964d00fdd3189354ddaa87bf5a105fe
-
SHA256
db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968
-
SHA512
aa15c6abef6bf76e208d06fb3c59555ce75f26f06dc4e8a1dc6b6fa68c5d7081ed2fd16a8819199b09cc25591f489bf5bca975f45df79a1159c6e51dee9997ef
-
SSDEEP
49152:0ybLOEb0Cmn887Hot+Z98rwrUAEDTvgGeqei21DJ8bho1y4U1a:0muowZd1EDT4GbS98b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968
Files
-
db8451b302afd608556e456a8bb83aa08e06e5f700c5acb7d7056bc7760c1968.exe windows:6 windows x86 arch:x86
1a32ad2c9947cbfc645f372ab8f6315d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Add
ImageList_Create
ImageList_Destroy
ord410
ord17
ord412
ord413
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
shlwapi
ord12
SHAutoComplete
StrCmpLogicalW
SHDeleteKeyW
uxtheme
GetThemePartSize
DrawThemeBackground
IsThemePartDefined
OpenThemeData
SetWindowTheme
EnableThemeDialogTexture
CloseThemeData
kernel32
CreateMutexW
TryEnterCriticalSection
SetThreadPriority
GetSystemPowerStatus
VerifyVersionInfoW
VerSetConditionMask
GlobalFree
SystemTimeToFileTime
LocalFileTimeToFileTime
ResumeThread
GetLocaleInfoW
GetNumberFormatW
DecodePointer
GlobalSize
CreateEventW
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
SetEndOfFile
GetFileTime
FlushFileBuffers
CreateFileW
GetDiskFreeSpaceExW
FindFirstFileW
DeleteFileW
RemoveDirectoryW
GetFileAttributesW
MoveFileExW
GetFileAttributesExW
FindNextFileW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
LeaveCriticalSection
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
InitOnceComplete
FindClose
SystemTimeToTzSpecificLocalTime
NormalizeString
SetErrorMode
OutputDebugStringW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
DeviceIoControl
SetFileTime
SetFilePointer
DosDateTimeToFileTime
GetFileSizeEx
FileTimeToSystemTime
GetSystemTimeAsFileTime
ReadDirectoryChangesW
GetThreadPriority
GetThreadId
GetFileInformationByHandle
TerminateProcess
GetCurrentProcess
DuplicateHandle
WriteFile
CancelIo
GetOverlappedResult
ReadFile
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GetCommandLineW
LoadLibraryExW
lstrlenW
GetNativeSystemInfo
GetVersionExW
PowerCreateRequest
PowerClearRequest
PowerSetRequest
GetTickCount64
DeleteCriticalSection
Sleep
GetCurrentThread
SetEvent
ResetEvent
GetExitCodeThread
GetCurrentProcessId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
VirtualQuery
VirtualProtect
GetSystemInfo
AcquireSRWLockShared
CopyFileW
IsDebuggerPresent
FreeLibrary
SetDllDirectoryW
CloseHandle
WaitForSingleObject
GetModuleHandleW
GetProcAddress
GetTickCount
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
MulDiv
InitializeCriticalSectionEx
LoadLibraryW
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
RaiseException
GetCurrentThreadId
SetLastError
InitOnceBeginInitialize
EnterCriticalSection
VirtualFree
user32
SetWindowTextW
DestroyWindow
UnregisterClassW
CreateDialogParamW
SetWindowLongW
SendDlgItemMessageW
GetActiveWindow
GetWindowLongW
GetClientRect
ClientToScreen
GetWindowRect
SetWindowPos
SetLayeredWindowAttributes
CharUpperW
GetComboBoxInfo
GetSystemMetrics
EnumThreadWindows
GetWindowPlacement
IsIconic
AdjustWindowRect
DrawEdge
SetClipboardData
CloseClipboard
OpenClipboard
FillRect
GetWindowTextLengthW
GetWindowTextW
NotifyWinEvent
RedrawWindow
ShowWindow
DrawTextW
TrackMouseEvent
InflateRect
FrameRect
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetNextDlgTabItem
InvalidateRgn
SystemParametersInfoW
ScrollWindowEx
SetScrollPos
UpdateWindow
SetScrollInfo
SetRectEmpty
SetGestureConfig
CloseGestureInfoHandle
GetGestureInfo
GetScrollInfo
MapDialogRect
IsZoomed
SetMenuItemInfoW
GetMenuItemInfoW
GetDC
BeginPaint
EndPaint
InvalidateRect
IsWindowEnabled
PostMessageW
CreateWindowExW
ScreenToClient
IntersectRect
PtInRect
DefWindowProcW
GetCursorPos
SetFocus
KillTimer
SetCapture
SetCursor
LoadCursorW
SetTimer
RegisterClassExW
GetClassInfoExW
CallWindowProcW
SendMessageW
GetDlgItem
EnableWindow
RegisterWindowMessageW
DeregisterShellHookWindow
RegisterShellHookWindow
CheckMenuRadioItem
WindowFromPoint
GetWindowThreadProcessId
GetClassNameW
EnumWindows
AllowSetForegroundWindow
TranslateMessage
GetClipboardData
IsCharAlphaW
IsClipboardFormatAvailable
LoadImageW
GetDesktopWindow
OffsetRect
wsprintfW
CopyRect
MonitorFromRect
RegisterClipboardFormatW
LoadIconW
MonitorFromWindow
CharLowerW
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EmptyClipboard
IsWindowVisible
MoveWindow
IsChild
GetWindow
IsRectEmpty
DrawTextExW
SetForegroundWindow
RegisterClassW
GetWindowDC
ReleaseDC
DrawFrameControl
GetParent
GetKeyState
GetMessagePos
AppendMenuW
TrackPopupMenu
CreatePopupMenu
MonitorFromPoint
GetMonitorInfoW
DestroyMenu
MessageBoxW
EndDialog
DialogBoxParamW
MessageBeep
SetActiveWindow
EnumChildWindows
MapWindowPoints
SetMenuDefaultItem
TrackPopupMenuEx
GetDlgCtrlID
GetSysColor
GetFocus
TranslateAcceleratorW
LoadAcceleratorsW
DestroyAcceleratorTable
RegisterHotKey
UnregisterHotKey
SetDlgItemTextW
MapVirtualKeyW
AdjustWindowRectEx
GetMenu
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
PostQuitMessage
DispatchMessageW
gdi32
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
SetTextColor
DeleteDC
DeleteObject
GetObjectW
CreateFontIndirectW
GetCurrentObject
CreatePen
OffsetRgn
SelectObject
GetStockObject
SetDCBrushColor
SetBkMode
CreateRectRgnIndirect
CreateRectRgn
GetTextExtentPoint32W
CreateCompatibleDC
GetTextColor
GetDeviceCaps
GetTextMetricsW
LPtoDP
SaveDC
RestoreDC
OffsetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreatePolygonRgn
FrameRgn
FillRgn
SetViewportOrgEx
BitBlt
CombineRgn
SetDCPenColor
LineTo
MoveToEx
GetBkColor
advapi32
CryptDestroyHash
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
RegQueryInfoKeyW
CryptGetHashParam
CryptVerifySignatureW
CryptHashData
CryptCreateHash
RegGetValueW
CryptDestroyKey
RegQueryValueExW
CryptReleaseContext
CryptImportKey
CryptAcquireContextW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
shell32
ShellExecuteExW
SHGetDesktopFolder
SHOpenFolderAndSelectItems
SHGetFolderPathW
ord74
SHCreateItemFromIDList
ShellExecuteW
ord680
DragFinish
DragAcceptFiles
ole32
CoCreateInstance
OleSetClipboard
OleGetClipboard
CoTaskMemFree
PropVariantClear
CLSIDFromString
CoTaskMemAlloc
ReleaseStgMedium
CoUninitialize
CoInitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoCreateGuid
oleaut32
VariantClear
SysAllocString
VariantInit
zlib1
inflate
inflateEnd
inflateInit2_
crc32
sqlite3
sqlite3_exec
sqlite3_busy_timeout
sqlite3_close
sqlite3_errmsg
sqlite3_open_v2
sqlite3_column_name
sqlite3_column_count
sqlite3_finalize
sqlite3_bind_text
sqlite3_column_int
sqlite3_bind_int
sqlite3_changes
sqlite3_clear_bindings
sqlite3_column_type
sqlite3_bind_null
sqlite3_last_insert_rowid
sqlite3_step
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int64
sqlite3_column_double
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_column_text
sqlite3_column_int64
sqlite3_reset
sqlite3_prepare_v2
shared
?calculate_peak@audio_math@@YGMPBMI@Z
?create@t_font_description@@QBGPAUHFONT__@@XZ
?g_from_system@t_font_description@@SG?AU1@H@Z
_uPrintCrashInfo_AddEnvironmentInfo@4
_uCharUpper@4
?popup_dialog@t_font_description@@QAG_NPAUHWND__@@@Z
_uGetClipboardString@4
_uFixAmpersandChars_v2@8
_uDragQueryFile@12
_uDragQueryFileCount@4
_uSetWindowTextEx@12
_stricmp_utf8_max@12
_stricmp_utf8_ex@16
_uCharLower@4
_uGetCommandLine@4
_LoadSystemLibrary@4
_uGetModuleHandle@4
_uSetCurrentDirectory@4
_uPrintCrashInfo_SetDumpPath@4
_uPrintCrashInfo_StartLogging@4
_uPrintCrashInfo_Init@4
_uGetCurrentDirectory@4
_uGetEnvironmentVariable@8
_uCreateFile@28
_uEvalKnownFolder@4
_uGetKeyNameText@8
_uRemovePanicHandler@4
_uAddPanicHandler@4
_uSearchPath@16
_uFixPathCaps@8
_uCreateDirectory@8
_uGetFileAttributes@4
_uAddStringLower@12
_uAddStringUpper@12
_uBrowseForFolder@12
_uBrowseForFolderEx@12
_uGetOpenFileName@32
_uGetOpenFileNameMulti@24
_uSendDlgItemMessageText@20
_uSendMessageText@16
_uAppendMenu@16
_ModalDialog_Switch@4
_uSetClipboardString@4
?uPrintCrashInfo_Suppress@@YGXXZ
_uPrintCrashInfo_SetComponentList@4
_uMessageBox@16
_uLoadLibrary@4
_uFindFirstFile@4
_GetInfiniteWaitEvent@0
?convert_to_int32@audio_math@@YGXPBMIPAHM@Z
?convert_to_int16@audio_math@@YGXPBMIPAFM@Z
_uGetTempFileName@16
_uGetTempPath@4
_stricmp_utf8@8
_uGetModuleFileName@8
_stricmp_utf8_partial@12
_ModalDialog_PokeExisting@0
_ModalDialog_CanCreateNew@0
_PokeWindow@4
_LoadResourceEx@16
_uFileExists@4
_uShellExecute@24
_uStringCompare@8
??1uCallStackTracker@@QAE@XZ
??0uCallStackTracker@@QAE@PBD@Z
_uGetDlgItemText@12
_uSetDlgItemText@12
_FindOwningPopup@4
_uGetWindowText@8
_uExceptFilterProc@4
_uSetWindowText@8
_uPrintCrashInfo_OnEvent@8
_uBugCheck@0
_uReplaceCharAdd@24
_uFormatSystemErrorMessage@8
?scale@audio_math@@YGXPBMIPAMM@Z
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_hardware_concurrency
_Thrd_id
_Thrd_detach
_Thrd_join
_Cnd_signal
?uncaught_exceptions@std@@YAHXZ
_Cnd_wait
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Cnd_broadcast
?_Xout_of_range@std@@YAXPBD@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
msimg32
GradientFill
oleacc
LresultFromObject
AccessibleObjectFromWindow
crypt32
CertVerifyRevocation
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertVerifyTimeValidity
CertCloseStore
CertFreeCertificateChain
CertFreeCertificateContext
winhttp
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
gdiplus
GdipFree
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipLoadImageFromStream
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipDrawImageRect
GdipSetSmoothingMode
GdipSetCompositingMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageType
GdiplusStartup
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdiplusShutdown
secur32
DecryptMessage
DeleteSecurityContext
InitializeSecurityContextW
AcquireCredentialsHandleW
FreeContextBuffer
AcceptSecurityContext
QueryContextAttributesW
EncryptMessage
FreeCredentialsHandle
vcruntime140
_except_handler3
strrchr
_CxxThrowException
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
strchr
strstr
wcschr
_set_purecall_handler
__current_exception_context
wcsstr
memcpy
memset
memmove
memcmp
_except_handler4_common
__current_exception
memchr
api-ms-win-crt-heap-l1-1-0
_aligned_malloc
_recalloc
_aligned_realloc
_aligned_free
_set_new_mode
free
malloc
_expand
_callnewh
realloc
api-ms-win-crt-runtime-l1-1-0
signal
_set_abort_behavior
_set_invalid_parameter_handler
_errno
_invalid_parameter_noinfo
_beginthreadex
_controlfp_s
abort
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
terminate
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_register_thread_local_exe_atexit_callback
_c_exit
api-ms-win-crt-math-l1-1-0
__libm_sse2_log
__libm_sse2_pow
__libm_sse2_sin
__libm_sse2_tan
_fpclass
log2
lround
llroundf
ceil
__libm_sse2_exp
llround
lroundf
__libm_sse2_log10
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
_set_fmode
api-ms-win-crt-string-l1-1-0
isalpha
strncmp
strcat_s
strcpy_s
wmemcpy_s
wcslen
strlen
_strdup
strcmp
wcsnlen
wcscpy_s
wcsncpy_s
wcstok_s
wcsncmp
api-ms-win-crt-convert-l1-1-0
atoi
_wtoi
_atoi64
atoll
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 467KB - Virtual size: 467KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.movehcs Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE