VSTPluginMain
main
Static task
static1
1 signatures
General
-
Target
GForm.dll
-
Size
757KB
-
MD5
a310a97935db0b8de84c0a94d9221736
-
SHA1
2a6ab036161e5ba63897c396e5ede8a86b59f797
-
SHA256
a1a8faa5d0708eae13bd88d2641ef465b646865c8eadaec6c519181f137afd9b
-
SHA512
e112234591d8303725a90a2bf0a12a2eb09b0ac84649d78d6e63e29029edd284df1a7e1066e6259858c37c187039402d29d36d607a84921c96dc255742d68549
-
SSDEEP
12288:EGxudi9YsO3g1JGmg+BYsChfsbBqjIvl5EvmoYRc1kV:EGxqi9YsO3g1JGYYxtuB2sEvmNIm
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GForm.dll
Files
-
GForm.dll.dll windows:6 windows x64 arch:x64
cd584140536a91ad77a42479683aac0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
HeapReAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
FindResourceA
LockResource
SizeofResource
LoadResource
GetCommandLineA
GetTickCount
LCMapStringW
GetFileType
GetStdHandle
CloseHandle
WaitForSingleObjectEx
GetCurrentThreadId
GetExitCodeThread
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLastError
CreateThread
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ExitThread
GetModuleHandleExW
ReadFile
ExitProcess
HeapFree
HeapAlloc
user32
EndPaint
BeginPaint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
CallWindowProcA
SetWindowTextA
GetFocus
ShowWindow
TranslateMessage
SetWindowLongPtrA
GetWindowLongPtrA
GetWindowTextA
RegisterClassExA
DefWindowProcA
CreateWindowExA
LoadCursorA
SetClassLongPtrA
InvalidateRect
ReleaseDC
GetDC
ReleaseCapture
SetCapture
SetFocus
GetParent
GetWindowRect
GetSystemMetrics
SetWindowPos
DestroyWindow
IsWindow
MessageBoxA
SendMessageA
gdi32
DeleteObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateFontIndirectA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
ShellExecuteA
opengl32
wglCreateContext
wglDeleteContext
wglMakeCurrent
Exports
Exports
Sections
.text Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ