C:\Users\Frederik\Documents\FabFilter\Projects\Pro-Q\Windows\x64\Release VST\FabFilter Pro-Q 3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FabFilter Pro-Q 3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FabFilter Pro-Q 3.dll
Resource
win10v2004-20231215-en
General
-
Target
FabFilter Pro-Q 3.vst3
-
Size
2.9MB
-
MD5
4fbf5849b14e9b5bd84c20139fefdd64
-
SHA1
07a684f1b94938278948ddf0159fce8daba003f6
-
SHA256
de0cd6e857e73e150a5befc921e67804bf3086f696aff0574d8ae8e5ce3e9336
-
SHA512
90a5f6495e5b521787878f3c7fbcc215c43a82d35f2e6272307ac501ceeb1d380efa260e93d280684b357639653168983874232b4216b99e43a85c6e62cef539
-
SSDEEP
49152:YqeXaAIc/ncPBmku8wNP1M1ZSCI+RT9bqRCQJfvHdQjz7:S+gNMLSjHRlJfvHdY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FabFilter Pro-Q 3.vst3
Files
-
FabFilter Pro-Q 3.vst3.dll windows:6 windows x64 arch:x64
Password: 123456
dc2b62c587bee83fc90530f26e0f99c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
winmm
timeGetTime
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
opengl32
glGenTextures
glDeleteTextures
glBindTexture
glGetString
glMatrixMode
glLoadIdentity
glShadeModel
glDisable
glTexEnvi
glEnable
glBlendFunc
glEnableClientState
glTexCoordPointer
glTexParameteri
wglGetProcAddress
glClear
glDrawElements
glDrawArrays
glDisableClientState
glScissor
glColor4f
glViewport
glOrtho
glVertexPointer
glColorPointer
wglDeleteContext
wglMakeCurrent
wglCreateContext
glPixelStorei
glTexImage2D
glTexSubImage2D
kernel32
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetFileType
GetStdHandle
HeapAlloc
HeapFree
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FindClose
FindFirstFileW
FindNextFileW
QueryPerformanceCounter
QueryPerformanceFrequency
FindResourceW
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
LoadResource
LockResource
SizeofResource
GetFileAttributesW
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
Sleep
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
CloseHandle
SetEvent
WaitForSingleObject
ResetEvent
LoadLibraryW
GetProcAddress
MulDiv
CreateEventW
SetThreadPriority
GlobalLock
GlobalUnlock
LCMapStringW
CompareStringW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ReadConsoleW
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
DeleteFileW
GetTimeZoneInformation
HeapReAlloc
RtlUnwind
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileSizeEx
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
SetEndOfFile
ExitThread
LCMapStringEx
InitializeCriticalSectionEx
DecodePointer
EncodePointer
GetExitCodeThread
WaitForSingleObjectEx
user32
SetCapture
SetTimer
GetKeyState
CallWindowProcW
SetFocus
ShowWindow
SendMessageW
TrackPopupMenuEx
DestroyMenu
UpdateWindow
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
SetCursor
FillRect
EnumDisplayMonitors
ReleaseDC
GetDC
GetAncestor
GetClassLongPtrW
MonitorFromWindow
LoadCursorW
SetWindowPos
GetWindowRect
ReleaseCapture
GetParent
EnumThreadWindows
wsprintfW
IsWindowVisible
MessageBoxW
DefWindowProcW
GetWindowLongPtrW
PostMessageW
UnregisterClassW
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
RegisterClassW
BeginPaint
GetCursorPos
EndPaint
GetSystemMetrics
GetDoubleClickTime
EnableWindow
IsWindowEnabled
EndDialog
DialogBoxParamW
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
OpenClipboard
GetClipboardData
SetWindowTextW
CloseClipboard
PtInRect
InvalidateRect
SystemParametersInfoW
MapWindowPoints
KillTimer
GetWindowPlacement
SetWindowPlacement
GetGUIThreadInfo
GetWindowLongW
EqualRect
DrawTextW
GetMonitorInfoW
gdi32
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetTextColor
SetBkColor
CreateFontIndirectW
CreateDIBSection
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
shell32
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderW
ole32
OleUninitialize
OleInitialize
CoCreateGuid
Exports
Exports
GetPluginFactory
VSTPluginMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 422KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 767KB - Virtual size: 766KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ