woofer_glass[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
woofer_glass.exe
Size 2.0MB
Sample260605-e21c1ab15q
SHA256 f32b9072e69c0e9c225ad98d55905e91f40473aa36224e9392e79ad416869a58
MD5 99e51e789842ed979d30254c700b54bc
SHA1 44d0810c08cb7414695c21b228ed6b57a20fa9c3
SHA512 6b0467d8d2fa8b6990fe296efb84366f9393396de810024d97eaf66660df44ac35d53cb3bd3eadb7a593117303c5c4973b564422b7a5283bf26006c641dcfdee
SSDEEP 49152:lAS9dccvnGfhRCqgA4PXm+uZBZspgx2z2LjgxsKg4Rp4:uS9dQHCMuELjgxsx
TLSH
T163A54A47E2A350ECC16BD1349657AB73F930B85805246E7A1BD4CB311FB1EA05BAEB34
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
woofer_glass.exe

File Explorer

woofer_glass.exe

.exe 2.0MB

woofer_glass.exe

IMPHASH 0c328372308c1806adcd6deafc15d91f
SHA256 f32b9072e69c0e9c225ad98d55905e91f40473aa36224e9392e79ad416869a58
MD5 99e51e789842ed979d30254c700b54bc
SHA1 44d0810c08cb7414695c21b228ed6b57a20fa9c3
SHA512 6b0467d8d2fa8b6990fe296efb84366f9393396de810024d97eaf66660df44ac35d53cb3bd3eadb7a593117303c5c4973b564422b7a5283bf26006c641dcfdee
SSDEEP 49152:lAS9dccvnGfhRCqgA4PXm+uZBZspgx2z2LjgxsKg4Rp4:uS9dQHCMuELjgxsx
TLSH
T163A54A47E2A350ECC16BD1349657AB73F930B85805246E7A1BD4CB311FB1EA05BAEB34
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

ClearEventLogA CloseEventLog OpenEventLogA RegCloseKey RegCreateKeyExA RegEnumKeyA RegOpenKeyExA RegQueryValueExA RegSetValueExA

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile D3DReflect

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

iphlpapi

GetAdaptersInfo

kernel32

CloseHandle CreateDirectoryA CreateEventA CreateFileA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FindResourceW FormatMessageA FreeLibrary GetCPInfo GetComputerNameA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesA GetFileSize GetLastError GetLocaleInfoA GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemTimeAsFileTime GetTempPathA GetThreadContext GetThreadPriority GetTickCount GetVolumeInformationA GlobalAlloc GlobalFree GlobalLock GlobalUnlock InitializeCriticalSection IsDBCSLeadByte IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LoadLibraryW LoadResource LocalFree LockResource MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _fileno _fmode _initterm _localtime64 _lock _read _setjmp _setmode _strtoi64 _strtoui64 _strdup _unlock _vscprintf _vsnprintf _wfopen _write atexit abort atof calloc exit fclose fflush fprintf fputc fputs free fread fseek ftell fwrite getc getenv isdigit isspace iswctype isxdigit ldexp localeconv longjmp malloc memchr memcmp memcpy memmove memset qsort realloc setlocale setvbuf signal strchr strcmp strcoll strerror strftime strlen strncmp strncpy strtol strtoul strxfrm system tolower towlower towupper ungetc vfprintf wcscoll wcsftime wcslen wcsxfrm

shell32

ShellExecuteW

user32

ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetMessageExtraInfo GetSystemMetrics GetWindowRect IsWindowUnicode LoadCursorA MonitorFromWindow OpenClipboard PeekMessageW PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetProcessDPIAware SetWindowDisplayAffinity ShowWindow TrackMouseEvent TranslateMessage UpdateWindow

winmm

PlaySoundA

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

201KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

woofer_glass.exe

advapi32

d3d11

d3dcompiler_47

dwmapi

gdi32

iphlpapi

kernel32

msvcrt

shell32

user32

winmm

generic