SoundSight[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SoundSight.exe
Size 672KB
Sample261113-2tpb4ahy2w
SHA256 05ac78a9821840b0959f95c5a17b3bde0ae0618c29f2fe27abd262416ebed426
MD5 55c89649fe924122218dcd9d31296462
SHA1 d45a75ddba8128e3606e0ce744215afdce7b40df
SHA512 1ce8ec418d0ed58c6bfb3643d03a47a2c12ebc620c8be84f0c3825d1ba09bd2f285a8e2473966c31bea1b99cbef40a40f9b54e758a930459e1f9c229a0806086
SSDEEP 12288:fKDHRA+7P3iTFl8zecibLoEa6oJbEhlMDuap:f+HRAIPiT46JbwwhlFa
TLSH
T160E46C52F75292FCE46AC03586166237F67378490B21B9FB4BE04B383F65BD06A39B05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SoundSight.exe

File Explorer

SoundSight.exe

.exe 672KB

SoundSight.exe

IMPHASH fe09da09359d1b8a031712e95d9f7c09
SHA256 05ac78a9821840b0959f95c5a17b3bde0ae0618c29f2fe27abd262416ebed426
MD5 55c89649fe924122218dcd9d31296462
SHA1 d45a75ddba8128e3606e0ce744215afdce7b40df
SHA512 1ce8ec418d0ed58c6bfb3643d03a47a2c12ebc620c8be84f0c3825d1ba09bd2f285a8e2473966c31bea1b99cbef40a40f9b54e758a930459e1f9c229a0806086
SSDEEP 12288:fKDHRA+7P3iTFl8zecibLoEa6oJbEhlMDuap:f+HRAIPiT46JbwwhlFa
TLSH
T160E46C52F75292FCE46AC03586166237F67378490B21B9FB4BE04B383F65BD06A39B05
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

442208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SoundSight.pdb

kernel32

GetModuleHandleExW IsThreadAFiber FlsSetValue FlsFree ReleaseMutex GetModuleHandleA CreateMutexA Sleep GetCurrentProcessId SetEvent LoadLibraryExA SetWaitableTimer WaitForMultipleObjects FlsAlloc GetProcAddress LoadLibraryA CancelWaitableTimer WaitForSingleObjectEx SetLastError GetCurrentThreadId WaitForSingleObject GetStartupInfoW CloseHandle FlsGetValue GetProcessHeap HeapFree HeapAlloc FormatMessageW CreateWaitableTimerExW ExitProcess TerminateProcess FreeLibrary SetThreadPriority SetThreadStackGuarantee CreateThread IsProcessorFeaturePresent LoadLibraryExW CreateEventW EncodePointer SetProcessWorkingSetSize GetCurrentProcess GetModuleHandleW SetThreadInformation GetCurrentThread GetLastError GetModuleFileNameW CreateMutexW GetFullPathNameW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW SetFilePointerEx WriteConsoleW FlushFileBuffers HeapSize MultiByteToWideChar LCMapStringW CompareStringW GetConsoleOutputCP GetConsoleMode GetStdHandle WideCharToMultiByte RtlVirtualUnwind VirtualProtect GetStringTypeW lstrlenW GetFileType RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW HeapReAlloc SetStdHandle SetEnvironmentVariableW AddVectoredExceptionHandler FreeEnvironmentStringsW FindClose CreateFileW SetFileTime GetEnvironmentStringsW SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx GetCommandLineW GetSystemTimeAsFileTime GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx GetCommandLineA WriteFile RtlPcToFileHeader DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RaiseException FindFirstFileExW

user32

SetTimer RegisterHotKey UnregisterHotKey DefWindowProcW KillTimer PostQuitMessage AdjustWindowRectEx InvalidateRect SetWindowTextW EnableWindow SendMessageW GetDlgItem GetDlgCtrlID ShowWindow UpdateLayeredWindowIndirect BeginPaint DestroyMenu TrackPopupMenu SetForegroundWindow GetCursorPos SetMenuDefaultItem AppendMenuW CreatePopupMenu PostMessageW FillRect EndPaint GetDpiForSystem SetProcessDpiAwarenessContext MsgWaitForMultipleObjectsEx IsDialogMessageW DispatchMessageW TranslateMessage PeekMessageW RegisterWindowMessageW SetWindowPos MessageBoxW CreateIconIndirect GetSysColorBrush LoadCursorW CreateWindowExW RegisterClassExW LoadIconW ReleaseDC GetDC GetSystemMetrics DestroyWindow

gdi32

BitBlt SetTextColor CreateCompatibleBitmap TextOutW SelectObject CreateDIBSection CreateFontW DeleteObject DeleteDC CreateBitmap CreateCompatibleDC CreateSolidBrush SetBkMode

comctl32

InitCommonControlsEx

advapi32

RegDeleteKeyValueW RegSetKeyValueW RegGetValueW

shell32

Shell_NotifyIconW ShellExecuteW

ole32

CoUninitialize CoInitializeEx CoCreateInstance

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

oleaut32

SysFreeString GetErrorInfo SysStringLen

combase

CoCreateFreeThreadedMarshaler CoTaskMemFree

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

comdlg32

ChooseColorW

Name

.text

Size

506KB

Virtual Size

506KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

145KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SoundSight.exe

kernel32

user32

gdi32

comctl32

advapi32

shell32

ole32

api-ms-win-core-synch-l1-2-0

avrt

oleaut32

combase

ntdll

comdlg32

generic