VSTPluginMain
Static task
static1
Behavioral task
behavioral1
Sample
Iowa Alto Sax - 64.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Iowa Alto Sax - 64.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Iowa Alto Sax - 64.instruments/Iowa Alto Sax - 64.mse
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Iowa Alto Sax - 64.instruments/Iowa Alto Sax - 64.mse
Resource
win10v2004-20221111-en
General
-
Target
Iowa_Alto_Sax_-_64.zip
-
Size
45.2MB
-
MD5
9d4aa76efb2ecfd72db586f94a5f7327
-
SHA1
64fb6c0927facf08d4900934f360df5762930b55
-
SHA256
6b6237fc6c8781dd707c392a7cf3615e92fc7b2e6a0ea26e2407e9a3cf7c6dcb
-
SHA512
1f2a56f95a5be37ce435c6a1182a297b2309619a58390f9dc4896384d4fb415d0ad72d89b184899f9829f5a16ade94c9b7483691fc6175d1f8f1ca6fcf26fcad
-
SSDEEP
786432:3oVo6oK4nqgoqaSHADuqWtt1gcHt0ggLzBuffcEgx7FUp+chj9H1w61/e9hxJV5v:3yIDToHSgJWtt1RtvgXYkvUMijwc6hXj
Malware Config
Signatures
Files
-
Iowa_Alto_Sax_-_64.zip.zip
-
Iowa Alto Sax - 64.dll.dll windows x64
e468aa7fba6d39dc01548c15862a0c8b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVersionExW
LeaveCriticalSection
IsProcessorFeaturePresent
GetFileAttributesW
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
MoveFileW
EnterCriticalSection
FindClose
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
SetThreadAffinityMask
ReleaseMutex
DeleteFileW
GetVolumeInformationW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
ReleaseSemaphore
CreateSemaphoreW
CreateThread
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FormatMessageW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
RtlUnwindEx
GetStdHandle
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
GetSystemTimeAsFileTime
GetTimeZoneInformation
WideCharToMultiByte
GetTimeFormatW
GetDateFormatW
ExitThread
GetModuleHandleW
GetFileType
HeapReAlloc
EncodePointer
DecodePointer
HeapAlloc
HeapFree
GetLocaleInfoW
TerminateThread
InitializeCriticalSection
WriteFile
OutputDebugStringW
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
FreeLibrary
SetEndOfFile
GetDriveTypeW
SetFilePointer
GetNativeSystemInfo
FindFirstFileW
CreateMutexW
ExitProcess
GetCurrentThreadId
CloseHandle
GetThreadPriority
CreateEventW
GetProcAddress
SetThreadPriority
MultiByteToWideChar
Sleep
LoadLibraryW
GetCurrentThread
SetEvent
WaitForSingleObject
GetCurrentProcess
GetModuleFileNameA
GetProcessHeap
user32
MessageBeep
GetWindowInfo
LoadCursorW
TrackMouseEvent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
GetDesktopWindow
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
DestroyWindow
GetSystemMetrics
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowPos
GetClassNameW
CallNextHookEx
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
GetParent
GetSystemMenu
GetWindowRect
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
PeekMessageW
TranslateMessage
EnumWindows
SetFocus
GetFocus
GetMessageW
ReleaseDC
GetDC
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
IsWindowVisible
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
SystemParametersInfoW
GetClipboardData
GetAncestor
GetWindowLongW
SetCursorPos
PostMessageW
MapVirtualKeyW
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
GetForegroundWindow
GetCapture
GetIconInfo
CreateIconIndirect
BeginPaint
ShowCaret
WindowFromPoint
gdi32
GetOutlineTextMetricsW
SetMapperFlags
GetKerningPairsW
GetGlyphOutlineW
SetMapMode
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
CreateCompatibleDC
DeleteObject
SelectObject
GetDeviceCaps
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
CreateRectRgn
GetObjectW
StretchDIBits
SaveDC
GetGlyphIndicesW
GetPixel
CombineRgn
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetPathFromIDListW
ShellExecuteW
ExtractAssociatedIconW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW
ole32
RegisterDragDrop
CoTaskMemAlloc
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
shlwapi
PathStripToRootW
winmm
timeBeginPeriod
timeGetTime
imm32
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Iowa Alto Sax - 64.instruments/Iowa Alto Sax - 64.mse