c:\code\Serum\win\x64\Release\SerumVST-x64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Serum_x64.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Serum_x64.dll
Resource
win10v2004-20240709-en
General
-
Target
Serum_x64.dll
-
Size
7.7MB
-
MD5
2448edd1a85b9fac716b4811dc061cf6
-
SHA1
7fc5be918d39a422beb2f636e55c0c8b0798bfe0
-
SHA256
3236ad6a9a848c5e1b6091505398e98ba8686e2c9fbf586535bfe59d7c453f69
-
SHA512
727b7a2678b5e92a9696a8f3ddda486071145c496dd0d2c51b69f7bc8e14d02d2d21788d724e6c3ead9a8179214c1721c638e732eef63ef2281e54f7c61dc973
-
SSDEEP
49152:8yM9kj01QyuX8C68K/oZ3pqfPfw9pS/EFniBvUdQzFhE+4Q7Ow7N3L54pldLQ9Ro:dZ4/dKQZb2bl1cKS+N+UYj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Serum_x64.dll
Files
-
Serum_x64.dll.dll windows:6 windows x64 arch:x64
b6120fb59f501bf96d090d1c397aae1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLocaleInfoW
WaitForSingleObject
CreateFileW
GetFileAttributesW
ReleaseMutex
GetSystemDirectoryW
GetComputerNameExW
UnmapViewOfFile
DisconnectNamedPipe
RtlCaptureStackBackTrace
SetFileAttributesW
GetLogicalDriveStringsW
CreateEventW
GetFileInformationByHandle
FormatMessageW
GetLastError
GetFileAttributesExW
OutputDebugStringW
SetEvent
GetLogicalProcessorInformation
GetDiskFreeSpaceExW
GetCurrentThread
TerminateThread
QueryPerformanceFrequency
DeleteFileW
CloseHandle
GetNativeSystemInfo
LoadLibraryW
GetCurrentDirectoryW
GetOverlappedResult
SetCurrentDirectoryW
ReplaceFileW
DeleteCriticalSection
GlobalMemoryStatusEx
CreateProcessW
FreeLibrary
CopyFileW
CreateSymbolicLinkW
CreateFileMappingW
MapViewOfFile
MoveFileW
GetDriveTypeW
ConnectNamedPipe
FlushFileBuffers
GetExitCodeProcess
SizeofResource
FindResourceA
GetVersionExW
GlobalSize
LoadLibraryA
LockResource
GlobalAlloc
GlobalFree
LoadResource
GlobalLock
WideCharToMultiByte
GetTickCount
GlobalUnlock
AreFileApisANSI
HeapCreate
HeapFree
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
GetProcessHeap
SystemTimeToFileTime
GetTempPathW
GetCommandLineW
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
DecodePointer
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetExitCodeThread
SwitchToThread
WriteConsoleW
MoveFileExW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetConsoleCtrlHandler
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileType
GetTimeZoneInformation
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
RtlPcToFileHeader
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
EncodePointer
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
CreateMutexW
PeekNamedPipe
SetEndOfFile
GetEnvironmentVariableW
SetFilePointer
CreatePipe
LeaveCriticalSection
SetThreadPriority
WaitForMultipleObjects
CreateNamedPipeW
GetModuleFileNameW
SetFileTime
RemoveDirectoryW
DeviceIoControl
GetModuleHandleExW
WriteFile
InitializeCriticalSection
FindNextFileW
EnterCriticalSection
SetLocalTime
SetPriorityClass
SetHandleInformation
FindFirstFileW
CancelIo
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
SetThreadAffinityMask
CreateDirectoryW
ExitProcess
GetSystemTime
GetProcAddress
Sleep
MultiByteToWideChar
GetModuleHandleA
GetVolumeInformationA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
FormatMessageA
ResetEvent
gdiplus
GdipCloneFontFamily
GdipDrawPolygon
GdipCreatePen1
GdipCreateBitmapFromResource
GdipCreateFontFamilyFromName
GdipGetEmHeight
GdipAddPathString
GdipGetFamily
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdipDeleteFontFamily
GdipAddPathLine
GdiplusShutdown
GdipSetPathFillMode
GdipDrawImageRectRectI
GdipDeleteMatrix
GdipGetFamilyName
GdipSetPathGradientSurroundColorsWithCount
GdipCreateBitmapFromScan0
GdipDeletePen
GdipTranslateWorldTransform
GdiplusStartup
GdipGetLineSpacing
GdipSetClipRect
GdipSetPathGradientCenterPoint
GdipSetPenColor
GdipCloneImage
GdipBitmapUnlockBits
GdipTransformPath
GdipDeleteBrush
GdipIsVisiblePathPoint
GdipCreateBitmapFromStream
GdipAlloc
GdipGetPathLastPoint
GdipCreateMatrix2
GdipAddPathBezier
GdipDisposeImageAttributes
GdipDeletePath
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipCreateBitmapFromStreamICM
GdipCreateMatrix
GdipDisposeImage
GdipSetMatrixElements
GdipSetSmoothingMode
GdipSetWorldTransform
GdipGetWorldTransform
GdipCreateLineBrush
GdipCreatePath
GdipFillPolygon
GdipCreateFont
GdipSetLinePresetBlend
GdipSetInterpolationMode
GdipGetDpiY
GdipGetCellDescent
GdipSetPenLineCap197819
GdipCreateSolidFill
GdipGetFontStyle
GdipFillPath
GdipGetPathWorldBounds
GdipSetPenDashArray
GdipCreateFromHWNDICM
GdipSetPenDashStyle
GdipSetPenWidth
GdipCreateFromHWND
GdipDrawLine
GdipDrawRectangle
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipFillRectangle
GdipAddPathEllipse
GdipSetPageUnit
GdipSetSolidFillColor
GdipClosePathFigure
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipNewInstalledFontCollection
GdipFree
GdipDrawPath
GdipDrawString
GdipGetFontCollectionFamilyList
GdipBitmapLockBits
GdipSetPenLineJoin
GdipCreateFromHDC
GdipFillEllipse
GdipAddPathRectangle
GdipSetTextRenderingHint
GdipGetCellAscent
GdipDrawEllipse
GdipCloneBrush
GdipSetPenDashOffset
GdipMeasureString
GdipGetFontHeightGivenDPI
GdipGetImageGraphicsContext
GdipGetPathGradientPointCount
GdipAddPathArc
GdipGetFontCollectionFamilyCount
GdipDeleteGraphics
GdipClonePath
GdipDeleteFont
GdipStartPathFigure
GdipGetFontSize
GdipGetImageWidth
winmm
timeKillEvent
timeGetTime
timeSetEvent
timeBeginPeriod
timeGetDevCaps
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
shell32
ord190
SHOpenFolderAndSelectItems
ShellExecuteA
ord155
SHFileOperationW
SHGetSpecialFolderPathW
DragQueryFileW
ord74
CommandLineToArgvW
SHGetPathFromIDListW
SHParseDisplayName
SHBrowseForFolderW
ExtractAssociatedIconW
SHGetMalloc
SHCreateShellItem
SHCreateDirectoryExW
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
OleUninitialize
GetHGlobalFromStream
DoDragDrop
CreateStreamOnHGlobal
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoTaskMemAlloc
CoTaskMemFree
gdi32
GetKerningPairsW
SelectObject
AddFontMemResourceEx
CreateSolidBrush
SetBkColor
GetRegionData
SetTextColor
EnumFontFamiliesExW
CreateDIBSection
CombineRgn
DeleteDC
RestoreDC
SetStretchBltMode
ExcludeClipRect
CreateCompatibleDC
GetTextMetricsW
GetDeviceCaps
CreateRectRgn
GetObjectW
CreateRectRgnIndirect
StretchDIBits
StretchBlt
SaveDC
BitBlt
SetBrushOrgEx
SetMapperFlags
GetGlyphIndicesW
DeleteObject
RemoveFontMemResourceEx
SetMapMode
CreateFontIndirectW
GetOutlineTextMetricsW
RemoveFontResourceExA
CreateBitmap
GetGlyphOutlineW
AddFontResourceExA
user32
TranslateMessage
GetMessageW
SendMessageTimeoutW
GetSystemMenu
GetMessageExtraInfo
GetMessagePos
FindWindowExW
GetFocus
IsWindowVisible
MessageBoxW
EnumChildWindows
ReleaseDC
GetDC
AttachThreadInput
GetWindowThreadProcessId
GetWindowTextW
EndPaint
BeginPaint
GetCursorPos
InvalidateRect
ReleaseCapture
GetParent
KillTimer
AppendMenuW
GetDlgItem
GetClientRect
SetWindowLongW
wsprintfW
SetCursor
SetCapture
LoadCursorW
SetFocus
DestroyMenu
TrackMouseEvent
SetMenuInfo
MapWindowPoints
RegisterClassW
PeekMessageW
SetMenuItemInfoW
GetWindowInfo
SetTimer
GetAsyncKeyState
IsWindow
TrackPopupMenu
GetWindowLongPtrW
CreatePopupMenu
SetWindowTextW
UnregisterClassW
GetSystemMetrics
SendMessageW
CreateWindowExW
SetWindowLongPtrW
SetWindowPos
DestroyWindow
GetWindowRect
MapVirtualKeyW
PostMessageW
CallWindowProcW
GetUpdateRgn
GetKeyState
DefWindowProcW
GetWindowTextLengthW
GetWindowLongW
GetClassNameW
DispatchMessageW
SendInput
SetCursorPos
SetForegroundWindow
SystemParametersInfoW
EnableMenuItem
GetDesktopWindow
ShowCaret
DrawIconEx
UpdateLayeredWindow
ToUnicode
SetClipboardData
DestroyCaret
FindWindowW
GetClipboardData
SetLayeredWindowAttributes
GetMessageTime
EnumWindows
GetForegroundWindow
CreateCaret
IsChild
EmptyClipboard
CloseClipboard
CreateIconIndirect
GetMonitorInfoW
DestroyIcon
RedrawWindow
GetCapture
OpenClipboard
ShowWindow
GetActiveWindow
SetCaretPos
GetKeyboardState
DestroyCursor
GetWindowPlacement
WindowFromPoint
RegisterClassExW
MessageBeep
EndDialog
ScreenToClient
GetIconInfo
EnumDisplayMonitors
advapi32
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
GetUserNameW
RegQueryValueExW
oleaut32
SysFreeString
SysAllocStringLen
wininet
InternetCloseHandle
InternetReadFile
HttpEndRequestW
InternetCrackUrlW
InternetConnectW
InternetSetOptionW
InternetSetOptionExW
HttpSendRequestW
HttpSendRequestExW
InternetGetConnectedState
InternetSetFilePointer
HttpQueryInfoW
InternetOpenW
FtpOpenFileW
InternetWriteFile
HttpOpenRequestW
ws2_32
accept
__WSAFDIsSet
closesocket
send
socket
bind
select
getpeername
WSAStartup
getaddrinfo
getsockname
ntohs
inet_addr
listen
WSAGetLastError
setsockopt
ioctlsocket
sendto
freeaddrinfo
htons
htonl
getsockopt
recv
recvfrom
inet_ntoa
connect
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
shlwapi
SHCreateStreamOnFileEx
ord12
PathStripToRootW
dbghelp
SymGetModuleInfo64
SymInitialize
SymFromAddr
imm32
ImmSetCandidateWindow
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME
Exports
Exports
VSTPluginMain
main
mus_array_to_file
mus_array_to_file_with_error
mus_audio_close
mus_audio_compatible_sample_type
mus_audio_device_channels
mus_audio_device_sample_type
mus_audio_initialize
mus_audio_moniker
mus_audio_open_input
mus_audio_open_output
mus_audio_read
mus_audio_write
mus_bytes_per_sample
mus_bytes_to_samples
mus_clip_set_handler
mus_clip_set_handler_and_checker
mus_clipping
mus_error
mus_error_set_handler
mus_error_type_to_string
mus_expand_filename
mus_fclamp
mus_file_clipping
mus_file_close
mus_file_create
mus_file_fd_name
mus_file_header_type
mus_file_open_descriptors
mus_file_open_read
mus_file_open_write
mus_file_probe
mus_file_read
mus_file_read_any
mus_file_read_buffer
mus_file_read_chans
mus_file_read_file
mus_file_reopen_write
mus_file_save_data
mus_file_seek_frample
mus_file_set_chans
mus_file_set_clipping
mus_file_set_header_type
mus_file_to_array
mus_file_to_float_array
mus_file_write
mus_file_write_buffer
mus_file_write_file
mus_float_array_to_file
mus_format
mus_getcwd
mus_header_aiff_aux_comment
mus_header_aux_comment_end
mus_header_aux_comment_start
mus_header_base_detune
mus_header_base_note
mus_header_bits_per_sample
mus_header_block_align
mus_header_change_chans
mus_header_change_comment
mus_header_change_data_size
mus_header_change_location
mus_header_change_sample_type
mus_header_change_srate
mus_header_change_type
mus_header_chans
mus_header_comment_end
mus_header_comment_start
mus_header_data_location
mus_header_fact_samples
mus_header_initialize
mus_header_loop_end
mus_header_loop_mode
mus_header_loop_start
mus_header_mark_info
mus_header_mark_position
mus_header_no_header
mus_header_original_sample_type
mus_header_original_sample_type_name
mus_header_raw_defaults
mus_header_read
mus_header_riff_aux_comment
mus_header_sample_type
mus_header_samples
mus_header_set_aiff_loop_info
mus_header_set_raw_defaults
mus_header_sf2_end
mus_header_sf2_entries
mus_header_sf2_loop_end
mus_header_sf2_loop_start
mus_header_sf2_name
mus_header_sf2_start
mus_header_srate
mus_header_true_length
mus_header_type
mus_header_type_name
mus_header_type_specifier
mus_header_type_to_string
mus_header_writable
mus_header_write
mus_header_write_set_hook
mus_iclamp
mus_is_header_type
mus_is_sample_type
mus_max_malloc
mus_max_table_size
mus_oclamp
mus_print
mus_print_set_handler
mus_reset_audio_c
mus_reset_headers_c
mus_reset_io_c
mus_sample_type_name
mus_sample_type_short_name
mus_sample_type_to_string
mus_samples_bounds
mus_samples_to_bytes
mus_set_clipping
mus_set_max_malloc
mus_set_max_table_size
mus_sound_bits_per_sample
mus_sound_block_align
mus_sound_channel_maxamp
mus_sound_channel_maxamp_exists
mus_sound_channel_set_maxamp
mus_sound_chans
mus_sound_close_input
mus_sound_close_output
mus_sound_comment
mus_sound_comment_end
mus_sound_comment_start
mus_sound_data_location
mus_sound_datum_size
mus_sound_duration
mus_sound_fact_samples
mus_sound_forget
mus_sound_framples
mus_sound_header_type
mus_sound_initialize
mus_sound_length
mus_sound_loop_info
mus_sound_mark_info
mus_sound_maxamp_exists
mus_sound_maxamps
mus_sound_open_input
mus_sound_open_output
mus_sound_original_sample_type
mus_sound_override_header
mus_sound_prune
mus_sound_reopen_output
mus_sound_report_cache
mus_sound_sample_type
mus_sound_samples
mus_sound_saved_data
mus_sound_set_chans
mus_sound_set_data_location
mus_sound_set_header_type
mus_sound_set_loop_info
mus_sound_set_maxamps
mus_sound_set_sample_type
mus_sound_set_samples
mus_sound_set_saved_data
mus_sound_set_srate
mus_sound_srate
mus_sound_type_specifier
mus_sound_write_date
mus_strcat
mus_strcmp
mus_strdup
mus_strlen
mus_write_header
Sections
.text Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ