E:\maker\PocoMaker_III\CODE2\Release\PocoZinePlayer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889.exe
Resource
win10v2004-20241007-en
General
-
Target
8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889
-
Size
4.5MB
-
MD5
38f1c47c42238b738862e2785e38fc1d
-
SHA1
f03d858178f77bde1a14525c536ff1f41dc89d31
-
SHA256
8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889
-
SHA512
074d0658a15a392f3aebc7e3532a533c5dc3d7988efc4c61b13852d5e25b44c9f27711d94441e1cea6cae958357a90d9f275e8c483e416dcfa126b5ae1638cb8
-
SSDEEP
98304:sF+vPOAypvKJ5fZZE7wTGEqKDjU5kLUgkmLwZZ8auYai9dqr99oH:3vPOCJ3ZE7wKV1unLYZEYFM7oH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889
Files
-
8b2151e48db150e0968621f584aab7d2492fefe68714e5d336f1a717c7e1d889.exe windows:4 windows x86 arch:x86
0806754c293999cb8a45bb24f7671a02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetSystemInfo
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
GetLastError
TerminateProcess
OpenProcess
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleFileNameA
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
CreateFileA
GetProcAddress
SetFilePointer
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetTickCount
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsBadWritePtr
HeapCreate
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetCurrentProcess
ExitProcess
RtlUnwind
HeapSize
HeapDestroy
VirtualProtect
ReadFile
VirtualFree
user32
SetTimer
SetWindowTextA
RegisterClassA
DefWindowProcA
KillTimer
MessageBoxA
CreateWindowExA
LoadCursorA
RegisterClassExA
IsWindow
UnregisterClassA
LoadIconA
CopyRect
GetClientRect
GetClassNameA
GetWindowLongA
SetWindowLongA
UpdateWindow
PostQuitMessage
SetWindowPos
PostMessageA
GetWindowRect
MoveWindow
EqualRect
BeginPaint
EndPaint
LockWindowUpdate
IsIconic
ShowWindow
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
ReleaseDC
GetDC
SetFocus
GetFocus
SetCapture
ReleaseCapture
RedrawWindow
gdi32
GetDeviceCaps
GetStockObject
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoGetMalloc
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
urlmon
CreateURLMoniker
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 856KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ