Install_Xfer_SerumFX_Update_121b4[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Install_Xfer_SerumFX_Update_121b4.exe
Size

9.8MB
MD5

9d868445a92f394d05e474d1322f78c8
SHA1

4279e851fc44a232688845d8f42d436253d056cf
SHA256

68d5d5ffdd1dd47bff5692f0544b41f07b3ee74523dee3c217e87ea03620bbbe
SHA512

1ec70fbe611ac6dd1bd88d18da73a5443a32bbb0646a13a580479273d6939d36e54e54525bcdb6e7f2a92180e2dc715dd2d24447776065c5dbcdee03ea75b2c4
SSDEEP

196608:4rh38WSEfC7ZWiVDlkzLzWqK75v29c/vfczr9VkQozMvX0f/HS39:4tscCHSfzW/vBczxVkQozMf0f/HS39

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
Install_Xfer_SerumFX_Update_121b4.exe
unpack001/$PLUGINSDIR/AdvSplash.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$_12_/SerumFX_x64.dll
unpack001/C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
unpack001/C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
unpack001/C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
unpack001/C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
unpack001/SerumFX.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

Install_Xfer_SerumFX_Update_121b4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AdvSplash.dll
.dll windows:4 windows x86 arch:x86

Password: infected

741b6bafe355b63a372d737b30543a95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GetVersion
lstrcpyA
lstrcatA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree

user32

LoadCursorA
RegisterClassA
SetWindowPos
SetWindowLongA
SystemParametersInfoA
EndPaint
GetClientRect
BeginPaint
DefWindowProcA
DestroyWindow
LoadImageA
CreateWindowExA
IsWindow
GetMessageA
DispatchMessageA
UnregisterClassA
wsprintfA
PostMessageA
SetWindowRgn
EnumDisplaySettingsA

gdi32

CombineRgn
CreateRectRgn
GetDIBits
SelectObject
CreateCompatibleDC
GetObjectA
DeleteDC
BitBlt
DeleteObject

winmm

timeSetEvent
PlaySoundA
timeKillEvent

Exports

Exports

show

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

Password: infected

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

Password: infected

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/splash.bmp
$_12_/SerumFX_x64.dll
.dll windows:5 windows x64 arch:x64

Password: infected

a6f30ce6a9e68cf04c37fc6de028da6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
CreateProcessW
SetPriorityClass
GlobalMemoryStatusEx
SetLocalTime
GetSystemDirectoryW
GetNativeSystemInfo
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
SetThreadAffinityMask
WaitForMultipleObjects
FormatMessageW
LoadLibraryW
CopyFileW
MoveFileW
ReplaceFileW
GetComputerNameW
VerifyVersionInfoW
CreateSymbolicLinkW
GetLocaleInfoW
GetCommandLineW
LocalFree
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
DuplicateHandle
SetLastError
ReleaseSemaphore
CreateEventA
GetThreadPriority
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
OpenProcess
GetSystemDirectoryA
GetProcessAffinityMask
CreateSemaphoreA
LoadLibraryA
GetTickCount
GetVersionExW
LoadResource
LockResource
SizeofResource
GlobalFree
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileA
FindNextFileA
GetSystemTime
lstrlenA
GetVolumeInformationA
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
OutputDebugStringA
GetSystemInfo
TerminateProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
LockFileEx
HeapSize
WaitForSingleObject
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
WaitForSingleObjectEx
LockFile
UnlockFile
HeapFree
SystemTimeToFileTime
HeapAlloc
HeapCompact
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
MoveFileExW
GetFileType
GetStdHandle
FatalAppExitA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCommandLineA
GetModuleHandleExW
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
LoadLibraryExW
ExitThread
CreateThread
GetTimeZoneInformation
IsProcessorFeaturePresent
DecodePointer
EncodePointer
ExitProcess
GetCurrentProcess
Sleep
CreateEventW
GetDiskFreeSpaceA
CreateMutexW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
ReleaseMutex
ResetEvent
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CancelIo
GetOverlappedResult
QueryPerformanceFrequency
QueryPerformanceCounter
CreateNamedPipeW
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
CreatePipe
GetLastError
SetUnhandledExceptionFilter
SetHandleInformation
CloseHandle
OutputDebugStringW
IsDebuggerPresent
GetTempPathW
WriteFile
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
HeapValidate
GetDriveTypeW
FileTimeToLocalFileTime
GetEnvironmentVariableW
VerSetConditionMask
CreateFileMappingA
RtlCaptureStackBackTrace

gdiplus

GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdiplusShutdown
GdipCreatePath
GdipClonePath
GdipDeletePath
GdipSetPathFillMode
GdipMeasureString
GdipDrawString
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdiplusStartup
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetFamilyName
GdipGetGenericFontFamilySansSerif
GdipCloneFontFamily
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetClipRect
GdipDrawImageRectRectI
GdipFillPath
GdipFillEllipse
GdipFillPolygon
GdipFillRectangle
GdipDrawPath
GdipDrawPolygon
GdipDrawEllipse
GdipDrawRectangle
GdipDrawLine
GdipGetDpiY
GdipStartPathFigure
GdipClosePathFigure
GdipGetPathLastPoint
GdipFree
GdipAlloc
GdipGetLineSpacing
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromResource
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenColor
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipSetTextRenderingHint

winmm

timeGetTime
timeGetDevCaps
timeKillEvent
timeSetEvent
timeBeginPeriod

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW
ExtractAssociatedIconW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
DragQueryFileW
ord74
SHGetSpecialFolderPathA
ShellExecuteA
SHFileOperationW
ord190
SHOpenFolderAndSelectItems
SHGetMalloc
ord155

ole32

CoInitialize
OleInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
OleUninitialize
CoTaskMemAlloc
RegisterDragDrop
CoCreateInstance

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
EnumFontFamiliesExW
GetDeviceCaps
GetGlyphOutlineW
GetOutlineTextMetricsW
GetGlyphIndicesW
AddFontMemResourceEx
RemoveFontMemResourceEx
SelectObject
SetMapperFlags
SetMapMode
GetTextMetricsW
GetKerningPairsW
BitBlt
CombineRgn
CreateBitmap
CreateRectRgn
CreateRectRgnIndirect
ExcludeClipRect
GetPixel
GetRegionData
RestoreDC
SaveDC
StretchDIBits
CreateDIBSection
GetObjectW
ChoosePixelFormat
CreateSolidBrush
SetBkColor
SetPixelFormat
SetTextColor
SwapBuffers
AddFontResourceExA
RemoveFontResourceExA
CreateFontIndirectW

user32

MapWindowPoints
GetWindowTextLengthW
GetUpdateRect
SetMenuItemInfoW
SetMenuInfo
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
EnableWindow
KillTimer
SetTimer
GetKeyState
GetDlgItem
RegisterClassW
CallWindowProcW
wsprintfW
GetClassNameW
GetAncestor
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
GetIconInfo
CreateIconIndirect
DestroyIcon
DestroyCursor
LoadCursorW
EnumChildWindows
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
WindowFromPoint
ScreenToClient
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetCursorPos
SetCursor
SetCursorPos
AttachThreadInput
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageTimeoutW
PostMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetFocus
GetFocus
GetWindowTextW
GetWindowLongPtrW
SetWindowLongPtrW
EnumWindows
GetDC
ReleaseDC
TrackMouseEvent
GetMessagePos
GetMessageTime
GetMessageExtraInfo
SendMessageW
IsChild
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
GetWindowPlacement
IsWindowVisible
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetAsyncKeyState
GetKeyboardState
ToUnicode
SendInput
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
GetSystemMenu
EnableMenuItem
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRgn
InvalidateRect
RedrawWindow
SetWindowTextW
GetClientRect
GetWindowRect
MessageBoxW
MessageBeep

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW

oleaut32

SysAllocStringLen
SysFreeString

wininet

FtpOpenFileW
HttpEndRequestW
HttpQueryInfoW
HttpOpenRequestW
HttpSendRequestExW
InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryOptionW
InternetSetOptionW

ws2_32

inet_ntoa
htons
htonl
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
WSAStartup
WSAGetLastError
getaddrinfo
freeaddrinfo
inet_addr

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

ord12
PathStripToRootW
SHCreateStreamOnFileEx

dbghelp

SymInitialize
SymGetModuleInfo64
SymFromAddr

imm32

ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext

opengl32

wglGetCurrentContext
wglDeleteContext
wglCreateContext
wglMakeCurrent

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
.dll windows:6 windows x86 arch:x86

Password: infected

4c8d31cc56985625860a91362dc62131

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
FindClose
CreateFileMappingW
CreateEventW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
CloseHandle
DeleteFileW
GetFileInformationByHandle
LocalFree
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
GetTickCount
FindResourceA
LoadResource
WideCharToMultiByte
SizeofResource
GetVersionExW
MultiByteToWideChar
GlobalFree
LoadLibraryA
LockResource
lstrlenA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
GetSystemTime
GetThreadContext
SetThreadContext
TlsGetValue
TlsSetValue
CreateEventA
GetSystemDirectoryA
SetLastError
GetThreadPriority
DuplicateHandle
TlsAlloc
TlsFree
ResumeThread
CreateMutexA
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetProcAddress
HeapCompact
HeapAlloc
SystemTimeToFileTime
UnlockFile
LockFile
WaitForSingleObjectEx
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
HeapSize
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
OutputDebugStringA
GetVersionExA
GetTempPathA
AreFileApisANSI
DeleteFileA
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileType
RaiseException
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetStdHandle
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetCommandLineA
GetModuleHandleExW
RtlUnwind
GetTimeZoneInformation
IsProcessorFeaturePresent
LoadLibraryExW
ExitThread
CreateThread
DecodePointer
EncodePointer
GetCurrentDirectoryW
GetLastError
VerifyVersionInfoW
GetTempPathW
GetDriveTypeW
FlushFileBuffers
UnmapViewOfFile
MapViewOfFile
PeekNamedPipe
TryEnterCriticalSection
SetFilePointer
FindFirstFileW
SetThreadPriority
CreateFileW
GetModuleFileNameW
ReadFile
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
Sleep
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetCurrentProcess
VerSetConditionMask
SetUnhandledExceptionFilter
FreeLibrary
HeapFree
SetEndOfFile
FileTimeToLocalFileTime
CreateMutexW
GetFileSize
ExitProcess

gdiplus

GdipAlloc
GdiplusShutdown
GdipDeleteBrush
GdipSetPenDashOffset
GdipAddPathLine
GdipSetPenWidth
GdipCreateFont
GdipAddPathString
GdipFree
GdipDeletePen
GdipSetPathGradientCenterColor
GdipCloneBrush
GdipCreateBitmapFromStreamICM
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdipDrawImageRectRectI
GdipSetPenLineJoin
GdipCreatePen1
GdipSetPathGradientCenterPoint
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipCreatePath
GdipSetPenDashStyle
GdipFillEllipse
GdipSetMatrixElements
GdipCreateBitmapFromResource
GdipBitmapLockBits
GdipSetInterpolationMode
GdipGetCellAscent
GdipDeleteMatrix
GdipGetPathLastPoint
GdipFillPath
GdipDrawLine
GdipSetSolidFillColor
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipCreateHBITMAPFromBitmap
GdipFillRectangle
GdipTranslateWorldTransform
GdipGetLineSpacing
GdipGetWorldTransform
GdipDrawString
GdipGetCellDescent
GdipDrawRectangle
GdipCreateImageAttributes
GdipIsVisiblePathPoint
GdipCreateFromHWND
GdiplusStartup
GdipCreateMatrix2
GdipDisposeImage
GdipAddPathEllipse
GdipCloneImage
GdipSetPenColor
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipBitmapUnlockBits
GdipDeleteFontFamily
GdipDrawPolygon
GdipGetGenericFontFamilySansSerif
GdipClonePath
GdipTransformPath
GdipDeletePath
GdipSetPageUnit
GdipAddPathBezier
GdipGetFamily
GdipSetLinePresetBlend
GdipGetPathGradientPointCount
GdipClosePathFigure
GdipSetSmoothingMode
GdipSetPenLineCap197819
GdipSetWorldTransform
GdipCreateLineBrush
GdipGetImageGraphicsContext
GdipCreatePathGradientFromPath
GdipGetFontStyle
GdipSetPathFillMode
GdipSetPenDashArray
GdipAddPathRectangle
GdipGetDpiY
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetPathWorldBounds
GdipDeleteFont
GdipDrawPath
GdipCreateMatrix
GdipGetFontHeightGivenDPI
GdipSetTextRenderingHint
GdipSetPathGradientSurroundColorsWithCount
GdipSetClipRect
GdipStartPathFigure
GdipMeasureString
GdipAddPathArc
GdipDrawEllipse
GdipFillPolygon
GdipGetEmHeight
GdipGetFontSize

winmm

timeBeginPeriod
timeGetTime

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHOpenFolderAndSelectItems
ord155
ExtractAssociatedIconW
DragQueryFileW
SHGetSpecialFolderPathA
ord190
ShellExecuteA
ord74

ole32

GetHGlobalFromStream
CreateStreamOnHGlobal
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoCreateInstance

gdi32

GetGlyphIndicesW
GetKerningPairsW
SetMapperFlags
GetOutlineTextMetricsW
SetMapMode
CreateCompatibleDC
SelectObject
DeleteObject
RemoveFontMemResourceEx
GetDeviceCaps
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
CreateRectRgn
StretchDIBits
SaveDC
CombineRgn
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
CreateSolidBrush
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetBkColor
SetTextColor
AddFontResourceExA
RemoveFontResourceExA
GetGlyphOutlineW

user32

GetWindowTextLengthW
SetTimer
TrackPopupMenu
KillTimer
GetKeyState
wsprintfW
GetUpdateRect
AppendMenuW
GetDlgItem
CreatePopupMenu
SetMenuInfo
RegisterClassW
MapWindowPoints
EnableWindow
DestroyMenu
SetMenuItemInfoW
CallWindowProcW
GetClassNameW
EndPaint
SetCursor
EnumDisplayMonitors
CloseClipboard
GetUpdateRgn
MapVirtualKeyW
GetSystemMenu
ScreenToClient
GetWindowRect
IsChild
GetMessageExtraInfo
SetCapture
SetForegroundWindow
GetParent
TrackMouseEvent
LoadCursorW
GetWindowInfo
MessageBeep
WindowFromPoint
GetClientRect
ShowCaret
BeginPaint
CreateIconIndirect
GetCapture
GetKeyboardState
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
DefWindowProcW
CreateWindowExW
SetWindowLongW
PeekMessageW
GetWindowTextW
GetWindowLongW
RegisterClassExW
EnumWindows
SetFocus
GetFocus
PostMessageW
UnregisterClassW
DestroyWindow
ReleaseDC
GetDC
GetMessagePos
GetMessageTime
GetMonitorInfoW
DestroyIcon
ToUnicode
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
IsWindowVisible
GetSystemMetrics
ReleaseCapture
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
EnumChildWindows
GetCursorPos
SetWindowPos
GetDesktopWindow
DestroyCaret
DestroyCursor
RedrawWindow
EmptyClipboard
EnableMenuItem
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHCreateStreamOnFileEx

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

opengl32

wglGetCurrentContext
wglCreateContext
wglDeleteContext
wglMakeCurrent

Exports

Exports

VSTPluginMain
_ACFCanUnloadNow@4
_ACFGetClassFactory@16
_ACFGetSDKVersion@4
_ACFRegisterComponent@12
_ACFRegisterPlugin@8
_ACFShutdown@4
_ACFStartup@4
main

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 723KB - Virtual size: 722KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
.dll windows:5 windows x64 arch:x64

Password: infected

9fdc08aac25be749c01bf89f807c6af9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
SetPriorityClass
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
SetThreadAffinityMask
FormatMessageW
LoadLibraryW
VerifyVersionInfoW
GetLocaleInfoW
LocalFree
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
DuplicateHandle
SetLastError
CreateEventA
GetThreadPriority
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
GetSystemDirectoryA
LoadLibraryA
GetTickCount
GetVersionExW
LoadResource
LockResource
SizeofResource
GlobalFree
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileA
FindNextFileA
GetSystemTime
lstrlenA
GetVolumeInformationA
CreateMutexA
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
OutputDebugStringA
GetSystemInfo
TerminateProcess
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
WaitForSingleObject
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
WaitForSingleObjectEx
LockFile
UnlockFile
HeapFree
SystemTimeToFileTime
HeapAlloc
HeapCompact
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCommandLineA
GetModuleHandleExW
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
LoadLibraryExW
ExitThread
CreateThread
GetTimeZoneInformation
IsProcessorFeaturePresent
DecodePointer
EncodePointer
ExitProcess
GetCurrentProcess
Sleep
CreateEventW
CreateMutexW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
ReleaseMutex
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
GetLastError
SetUnhandledExceptionFilter
CloseHandle
OutputDebugStringW
IsDebuggerPresent
GetTempPathW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
HeapSize
GetDriveTypeW
FileTimeToLocalFileTime
VerSetConditionMask
GetDiskFreeSpaceA

gdiplus

GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipCreateFromHWND
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdiplusShutdown
GdipCreatePath
GdipClonePath
GdipDeletePath
GdipSetPathFillMode
GdipMeasureString
GdipDrawString
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdiplusStartup
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetClipRect
GdipDrawImageRectRectI
GdipFillPath
GdipFillEllipse
GdipFillPolygon
GdipFillRectangle
GdipDrawPath
GdipDrawPolygon
GdipDrawEllipse
GdipDrawRectangle
GdipDrawLine
GdipGetDpiY
GdipStartPathFigure
GdipClosePathFigure
GdipGetPathLastPoint
GdipFree
GdipAlloc
GdipGetLineSpacing
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromResource
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenColor
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipSetTextRenderingHint

winmm

timeGetTime
timeBeginPeriod

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

ExtractAssociatedIconW
DragQueryFileW
ord74
SHGetSpecialFolderPathA
ShellExecuteA
ord190
SHOpenFolderAndSelectItems
ord155

ole32

OleInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
OleUninitialize
RegisterDragDrop
CoCreateInstance

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
GetGlyphOutlineW
GetOutlineTextMetricsW
GetGlyphIndicesW
RemoveFontMemResourceEx
SelectObject
SetMapperFlags
SetMapMode
GetTextMetricsW
GetKerningPairsW
CombineRgn
CreateBitmap
CreateRectRgn
CreateRectRgnIndirect
ExcludeClipRect
GetRegionData
RestoreDC
SaveDC
StretchDIBits
CreateDIBSection
ChoosePixelFormat
CreateSolidBrush
SetBkColor
SetPixelFormat
SetTextColor
SwapBuffers
AddFontResourceExA
RemoveFontResourceExA
CreateFontIndirectW

user32

MapWindowPoints
GetWindowTextLengthW
GetUpdateRect
SetMenuItemInfoW
SetMenuInfo
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
EnableWindow
KillTimer
SetTimer
GetKeyState
GetDlgItem
RegisterClassW
CallWindowProcW
wsprintfW
GetClassNameW
GetAncestor
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
CreateIconIndirect
DestroyIcon
DestroyCursor
LoadCursorW
EnumChildWindows
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
WindowFromPoint
ScreenToClient
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetCursorPos
SetCursor
SetCursorPos
AttachThreadInput
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetFocus
GetFocus
GetWindowTextW
GetWindowLongPtrW
SetWindowLongPtrW
EnumWindows
GetDC
ReleaseDC
TrackMouseEvent
GetMessagePos
GetMessageTime
GetMessageExtraInfo
SendMessageW
IsChild
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
GetWindowPlacement
IsWindowVisible
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetAsyncKeyState
GetKeyboardState
ToUnicode
SendInput
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
GetSystemMenu
EnableMenuItem
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRgn
InvalidateRect
RedrawWindow
SetWindowTextW
GetClientRect
GetWindowRect
MessageBeep

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHCreateStreamOnFileEx

imm32

ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext

opengl32

wglGetCurrentContext
wglDeleteContext
wglCreateContext
wglMakeCurrent

Exports

Exports

ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
VSTPluginMain
main

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
.dll windows:6 windows x86 arch:x86

Password: infected

4c8d31cc56985625860a91362dc62131

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
FindClose
CreateFileMappingW
CreateEventW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
CloseHandle
DeleteFileW
GetFileInformationByHandle
LocalFree
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
GetTickCount
FindResourceA
LoadResource
WideCharToMultiByte
SizeofResource
GetVersionExW
MultiByteToWideChar
GlobalFree
LoadLibraryA
LockResource
lstrlenA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
GetSystemTime
GetThreadContext
SetThreadContext
TlsGetValue
TlsSetValue
CreateEventA
GetSystemDirectoryA
SetLastError
GetThreadPriority
DuplicateHandle
TlsAlloc
TlsFree
ResumeThread
CreateMutexA
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetProcAddress
HeapCompact
HeapAlloc
SystemTimeToFileTime
UnlockFile
LockFile
WaitForSingleObjectEx
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
HeapSize
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
OutputDebugStringA
GetVersionExA
GetTempPathA
AreFileApisANSI
DeleteFileA
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileType
RaiseException
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetStdHandle
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetCommandLineA
GetModuleHandleExW
RtlUnwind
GetTimeZoneInformation
IsProcessorFeaturePresent
LoadLibraryExW
ExitThread
CreateThread
DecodePointer
EncodePointer
GetCurrentDirectoryW
GetLastError
VerifyVersionInfoW
GetTempPathW
GetDriveTypeW
FlushFileBuffers
UnmapViewOfFile
MapViewOfFile
PeekNamedPipe
TryEnterCriticalSection
SetFilePointer
FindFirstFileW
SetThreadPriority
CreateFileW
GetModuleFileNameW
ReadFile
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
Sleep
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetCurrentProcess
VerSetConditionMask
SetUnhandledExceptionFilter
FreeLibrary
HeapFree
SetEndOfFile
FileTimeToLocalFileTime
CreateMutexW
GetFileSize
ExitProcess

gdiplus

GdipAlloc
GdiplusShutdown
GdipDeleteBrush
GdipSetPenDashOffset
GdipAddPathLine
GdipSetPenWidth
GdipCreateFont
GdipAddPathString
GdipFree
GdipDeletePen
GdipSetPathGradientCenterColor
GdipCloneBrush
GdipCreateBitmapFromStreamICM
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdipDrawImageRectRectI
GdipSetPenLineJoin
GdipCreatePen1
GdipSetPathGradientCenterPoint
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipCreatePath
GdipSetPenDashStyle
GdipFillEllipse
GdipSetMatrixElements
GdipCreateBitmapFromResource
GdipBitmapLockBits
GdipSetInterpolationMode
GdipGetCellAscent
GdipDeleteMatrix
GdipGetPathLastPoint
GdipFillPath
GdipDrawLine
GdipSetSolidFillColor
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipCreateHBITMAPFromBitmap
GdipFillRectangle
GdipTranslateWorldTransform
GdipGetLineSpacing
GdipGetWorldTransform
GdipDrawString
GdipGetCellDescent
GdipDrawRectangle
GdipCreateImageAttributes
GdipIsVisiblePathPoint
GdipCreateFromHWND
GdiplusStartup
GdipCreateMatrix2
GdipDisposeImage
GdipAddPathEllipse
GdipCloneImage
GdipSetPenColor
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipBitmapUnlockBits
GdipDeleteFontFamily
GdipDrawPolygon
GdipGetGenericFontFamilySansSerif
GdipClonePath
GdipTransformPath
GdipDeletePath
GdipSetPageUnit
GdipAddPathBezier
GdipGetFamily
GdipSetLinePresetBlend
GdipGetPathGradientPointCount
GdipClosePathFigure
GdipSetSmoothingMode
GdipSetPenLineCap197819
GdipSetWorldTransform
GdipCreateLineBrush
GdipGetImageGraphicsContext
GdipCreatePathGradientFromPath
GdipGetFontStyle
GdipSetPathFillMode
GdipSetPenDashArray
GdipAddPathRectangle
GdipGetDpiY
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetPathWorldBounds
GdipDeleteFont
GdipDrawPath
GdipCreateMatrix
GdipGetFontHeightGivenDPI
GdipSetTextRenderingHint
GdipSetPathGradientSurroundColorsWithCount
GdipSetClipRect
GdipStartPathFigure
GdipMeasureString
GdipAddPathArc
GdipDrawEllipse
GdipFillPolygon
GdipGetEmHeight
GdipGetFontSize

winmm

timeBeginPeriod
timeGetTime

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHOpenFolderAndSelectItems
ord155
ExtractAssociatedIconW
DragQueryFileW
SHGetSpecialFolderPathA
ord190
ShellExecuteA
ord74

ole32

GetHGlobalFromStream
CreateStreamOnHGlobal
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoCreateInstance

gdi32

GetGlyphIndicesW
GetKerningPairsW
SetMapperFlags
GetOutlineTextMetricsW
SetMapMode
CreateCompatibleDC
SelectObject
DeleteObject
RemoveFontMemResourceEx
GetDeviceCaps
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
CreateRectRgn
StretchDIBits
SaveDC
CombineRgn
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
CreateSolidBrush
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetBkColor
SetTextColor
AddFontResourceExA
RemoveFontResourceExA
GetGlyphOutlineW

user32

GetWindowTextLengthW
SetTimer
TrackPopupMenu
KillTimer
GetKeyState
wsprintfW
GetUpdateRect
AppendMenuW
GetDlgItem
CreatePopupMenu
SetMenuInfo
RegisterClassW
MapWindowPoints
EnableWindow
DestroyMenu
SetMenuItemInfoW
CallWindowProcW
GetClassNameW
EndPaint
SetCursor
EnumDisplayMonitors
CloseClipboard
GetUpdateRgn
MapVirtualKeyW
GetSystemMenu
ScreenToClient
GetWindowRect
IsChild
GetMessageExtraInfo
SetCapture
SetForegroundWindow
GetParent
TrackMouseEvent
LoadCursorW
GetWindowInfo
MessageBeep
WindowFromPoint
GetClientRect
ShowCaret
BeginPaint
CreateIconIndirect
GetCapture
GetKeyboardState
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
DefWindowProcW
CreateWindowExW
SetWindowLongW
PeekMessageW
GetWindowTextW
GetWindowLongW
RegisterClassExW
EnumWindows
SetFocus
GetFocus
PostMessageW
UnregisterClassW
DestroyWindow
ReleaseDC
GetDC
GetMessagePos
GetMessageTime
GetMonitorInfoW
DestroyIcon
ToUnicode
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
IsWindowVisible
GetSystemMetrics
ReleaseCapture
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
EnumChildWindows
GetCursorPos
SetWindowPos
GetDesktopWindow
DestroyCaret
DestroyCursor
RedrawWindow
EmptyClipboard
EnableMenuItem
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHCreateStreamOnFileEx

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

opengl32

wglGetCurrentContext
wglCreateContext
wglDeleteContext
wglMakeCurrent

Exports

Exports

VSTPluginMain
_ACFCanUnloadNow@4
_ACFGetClassFactory@16
_ACFGetSDKVersion@4
_ACFRegisterComponent@12
_ACFRegisterPlugin@8
_ACFShutdown@4
_ACFStartup@4
main

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 723KB - Virtual size: 722KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
.dll windows:5 windows x64 arch:x64

Password: infected

9fdc08aac25be749c01bf89f807c6af9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
SetPriorityClass
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
SetThreadAffinityMask
FormatMessageW
LoadLibraryW
VerifyVersionInfoW
GetLocaleInfoW
LocalFree
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
DuplicateHandle
SetLastError
CreateEventA
GetThreadPriority
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
GetSystemDirectoryA
LoadLibraryA
GetTickCount
GetVersionExW
LoadResource
LockResource
SizeofResource
GlobalFree
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileA
FindNextFileA
GetSystemTime
lstrlenA
GetVolumeInformationA
CreateMutexA
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
OutputDebugStringA
GetSystemInfo
TerminateProcess
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
WaitForSingleObject
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
WaitForSingleObjectEx
LockFile
UnlockFile
HeapFree
SystemTimeToFileTime
HeapAlloc
HeapCompact
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCommandLineA
GetModuleHandleExW
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
LoadLibraryExW
ExitThread
CreateThread
GetTimeZoneInformation
IsProcessorFeaturePresent
DecodePointer
EncodePointer
ExitProcess
GetCurrentProcess
Sleep
CreateEventW
CreateMutexW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
ReleaseMutex
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
GetLastError
SetUnhandledExceptionFilter
CloseHandle
OutputDebugStringW
IsDebuggerPresent
GetTempPathW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
HeapSize
GetDriveTypeW
FileTimeToLocalFileTime
VerSetConditionMask
GetDiskFreeSpaceA

gdiplus

GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipCreateFromHWND
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdiplusShutdown
GdipCreatePath
GdipClonePath
GdipDeletePath
GdipSetPathFillMode
GdipMeasureString
GdipDrawString
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdiplusStartup
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetClipRect
GdipDrawImageRectRectI
GdipFillPath
GdipFillEllipse
GdipFillPolygon
GdipFillRectangle
GdipDrawPath
GdipDrawPolygon
GdipDrawEllipse
GdipDrawRectangle
GdipDrawLine
GdipGetDpiY
GdipStartPathFigure
GdipClosePathFigure
GdipGetPathLastPoint
GdipFree
GdipAlloc
GdipGetLineSpacing
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromResource
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenColor
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipSetTextRenderingHint

winmm

timeGetTime
timeBeginPeriod

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

ExtractAssociatedIconW
DragQueryFileW
ord74
SHGetSpecialFolderPathA
ShellExecuteA
ord190
SHOpenFolderAndSelectItems
ord155

ole32

OleInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
OleUninitialize
RegisterDragDrop
CoCreateInstance

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
GetGlyphOutlineW
GetOutlineTextMetricsW
GetGlyphIndicesW
RemoveFontMemResourceEx
SelectObject
SetMapperFlags
SetMapMode
GetTextMetricsW
GetKerningPairsW
CombineRgn
CreateBitmap
CreateRectRgn
CreateRectRgnIndirect
ExcludeClipRect
GetRegionData
RestoreDC
SaveDC
StretchDIBits
CreateDIBSection
ChoosePixelFormat
CreateSolidBrush
SetBkColor
SetPixelFormat
SetTextColor
SwapBuffers
AddFontResourceExA
RemoveFontResourceExA
CreateFontIndirectW

user32

MapWindowPoints
GetWindowTextLengthW
GetUpdateRect
SetMenuItemInfoW
SetMenuInfo
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
EnableWindow
KillTimer
SetTimer
GetKeyState
GetDlgItem
RegisterClassW
CallWindowProcW
wsprintfW
GetClassNameW
GetAncestor
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
CreateIconIndirect
DestroyIcon
DestroyCursor
LoadCursorW
EnumChildWindows
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
WindowFromPoint
ScreenToClient
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetCursorPos
SetCursor
SetCursorPos
AttachThreadInput
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetFocus
GetFocus
GetWindowTextW
GetWindowLongPtrW
SetWindowLongPtrW
EnumWindows
GetDC
ReleaseDC
TrackMouseEvent
GetMessagePos
GetMessageTime
GetMessageExtraInfo
SendMessageW
IsChild
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
GetWindowPlacement
IsWindowVisible
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetAsyncKeyState
GetKeyboardState
ToUnicode
SendInput
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
GetSystemMenu
EnableMenuItem
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRgn
InvalidateRect
RedrawWindow
SetWindowTextW
GetClientRect
GetWindowRect
MessageBeep

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHCreateStreamOnFileEx

imm32

ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext

opengl32

wglGetCurrentContext
wglDeleteContext
wglCreateContext
wglMakeCurrent

Exports

Exports

ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
VSTPluginMain
main

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
SerumFX.dll
.dll windows:5 windows x86 arch:x86

0880e29664022f4c8bcda0cae03d2de0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\code\Serum\win\Release\NerveINPUT.pdb

Imports

kernel32

GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
CreateProcessW
SetPriorityClass
GlobalMemoryStatusEx
SetLocalTime
GetSystemDirectoryW
GetNativeSystemInfo
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
SetThreadAffinityMask
WaitForMultipleObjects
FormatMessageW
LoadLibraryW
CopyFileW
MoveFileW
ReplaceFileW
GetComputerNameW
VerifyVersionInfoW
CreateSymbolicLinkW
GetLocaleInfoW
GetCommandLineW
LocalFree
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
DuplicateHandle
SetLastError
ReleaseSemaphore
CreateEventA
GetThreadPriority
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
OpenProcess
GetSystemDirectoryA
GetProcessAffinityMask
CreateSemaphoreA
LoadLibraryA
GetTickCount
GetVersionExW
LoadResource
LockResource
SizeofResource
GlobalFree
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileA
FindNextFileA
GetSystemTime
lstrlenA
GetVolumeInformationA
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
TerminateProcess
GetDiskFreeSpaceExW
GetDiskFreeSpaceA
CreateFileMappingA
GetDiskFreeSpaceW
WaitForSingleObject
HeapSize
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
WaitForSingleObjectEx
LockFile
UnlockFile
HeapFree
SystemTimeToFileTime
HeapAlloc
HeapCompact
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
MoveFileExW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
FatalAppExitA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCommandLineA
GetModuleHandleExW
RtlUnwind
RaiseException
LoadLibraryExW
ExitThread
CreateThread
GetTimeZoneInformation
IsProcessorFeaturePresent
DecodePointer
EncodePointer
ExitProcess
GetCurrentProcess
Sleep
CreateEventW
OutputDebugStringA
CreateMutexW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
ReleaseMutex
ResetEvent
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CancelIo
GetOverlappedResult
QueryPerformanceFrequency
QueryPerformanceCounter
CreateNamedPipeW
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
CreatePipe
GetLastError
SetUnhandledExceptionFilter
SetHandleInformation
CloseHandle
OutputDebugStringW
IsDebuggerPresent
GetTempPathW
WriteFile
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
LockFileEx
GetDriveTypeW
FileTimeToLocalFileTime
GetEnvironmentVariableW
VerSetConditionMask
GetSystemInfo
RtlCaptureStackBackTrace

gdiplus

GdipCreateHBITMAPFromBitmap
GdipAlloc
GdipFree
GdipGetFontCollectionFamilyCount
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipCreateFromHWND
GdiplusStartup
GdiplusShutdown
GdipCreatePath
GdipClonePath
GdipDeletePath
GdipSetPathFillMode
GdipStartPathFigure
GdipClosePathFigure
GdipGetPathLastPoint
GdipNewInstalledFontCollection
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdipGetLineSpacing
GdipGetCellDescent
GdipCreateBitmapFromResource
GdipGetEmHeight
GdipGetFamilyName
GdipGetGenericFontFamilySansSerif
GdipCloneFontFamily
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetClipRect
GdipDrawImageRectRectI
GdipFillPath
GdipFillEllipse
GdipFillPolygon
GdipFillRectangle
GdipDrawPath
GdipDrawPolygon
GdipDrawEllipse
GdipDrawRectangle
GdipDrawLine
GdipGetDpiY
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipSetWorldTransform
GdipGetFontCollectionFamilyList
GdipDrawString
GdipMeasureString
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateImageAttributes
GdipGetCellAscent
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipDeleteGraphics
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenColor
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipIsVisiblePathPoint
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipCreateFromHWNDICM

winmm

timeGetDevCaps
timeGetTime
timeKillEvent
timeBeginPeriod
timeSetEvent

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW

shell32

ord190
SHOpenFolderAndSelectItems
SHFileOperationW
SHGetSpecialFolderPathW
CommandLineToArgvW
ExtractAssociatedIconW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
DragQueryFileW
ShellExecuteW
SHGetSpecialFolderPathA
ShellExecuteA
ord155
ord74

ole32

GetHGlobalFromStream
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoCreateInstance
CoInitialize

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
EnumFontFamiliesExW
GetDeviceCaps
GetGlyphOutlineW
GetOutlineTextMetricsW
GetGlyphIndicesW
AddFontMemResourceEx
RemoveFontMemResourceEx
SelectObject
SetMapperFlags
SetMapMode
GetTextMetricsW
GetKerningPairsW
BitBlt
CombineRgn
CreateBitmap
CreateRectRgn
CreateRectRgnIndirect
ExcludeClipRect
GetPixel
GetRegionData
RestoreDC
SaveDC
StretchDIBits
CreateDIBSection
GetObjectW
ChoosePixelFormat
CreateSolidBrush
SetBkColor
SetPixelFormat
SetTextColor
SwapBuffers
AddFontResourceExA
RemoveFontResourceExA
CreateFontIndirectW

user32

MapWindowPoints
GetWindowTextLengthW
GetUpdateRect
SetMenuItemInfoW
SetMenuInfo
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
EnableWindow
KillTimer
SetTimer
GetKeyState
GetDlgItem
RegisterClassW
CallWindowProcW
wsprintfW
GetClassNameW
GetAncestor
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
GetIconInfo
CreateIconIndirect
DestroyIcon
DestroyCursor
LoadCursorW
EnumChildWindows
GetParent
GetDesktopWindow
WindowFromPoint
ScreenToClient
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetCursorPos
SetCursor
SetCursorPos
MessageBeep
MessageBoxW
GetWindowRect
GetClientRect
SetWindowTextW
RedrawWindow
AttachThreadInput
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageTimeoutW
PostMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetFocus
GetFocus
GetWindowTextW
GetWindowLongW
SetWindowLongW
EnumWindows
GetDC
ReleaseDC
TrackMouseEvent
GetMessagePos
GetMessageTime
GetMessageExtraInfo
SendMessageW
IsChild
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
GetWindowPlacement
IsWindowVisible
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetAsyncKeyState
GetKeyboardState
ToUnicode
SendInput
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
GetSystemMenu
EnableMenuItem
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
GetUpdateRgn
InvalidateRect

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW

oleaut32

SysAllocStringLen
SysFreeString

wininet

FtpOpenFileW
HttpEndRequestW
HttpQueryInfoW
HttpOpenRequestW
HttpSendRequestExW
InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryOptionW
InternetSetOptionW

ws2_32

inet_ntoa
htons
htonl
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
WSAStartup
WSAGetLastError
getaddrinfo
freeaddrinfo
inet_addr

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

ord12
SHCreateStreamOnFileEx
PathStripToRootW

dbghelp

SymFromAddr
SymInitialize
SymGetModuleInfo64

imm32

ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext

opengl32

wglDeleteContext
wglCreateContext
wglMakeCurrent
wglGetCurrentContext

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 162KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 151KB

.ndata Size: - Virtual size: 88KB

.rsrc Size: 19KB - Virtual size: 18KB

Password: infected

741b6bafe355b63a372d737b30543a95

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 188B

.reloc Size: 512B - Virtual size: 436B

Password: infected

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

Password: infected

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 572B

Password: infected

a6f30ce6a9e68cf04c37fc6de028da6f

Headers

DLL Characteristics

File Characteristics

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 151KB

.ndata
Size: - Virtual size: 88KB

.rsrc
Size: 19KB - Virtual size: 18KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 188B

.reloc
Size: 512B - Virtual size: 436B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 572B

.text
Size: 6.2MB - Virtual size: 6.2MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 209KB - Virtual size: 241KB

.pdata
Size: 321KB - Virtual size: 320KB

.idata
Size: 25KB - Virtual size: 24KB

.tls
Size: 1024B - Virtual size: 786B

.ctors
Size: 512B - Virtual size: 265B

.dtors
Size: 512B - Virtual size: 265B

_RDATA
Size: 46KB - Virtual size: 46KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 92KB - Virtual size: 92KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 723KB - Virtual size: 722KB

.data
Size: 68KB - Virtual size: 85KB

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 140KB - Virtual size: 139KB