Factorsynth[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Factorsynth.exe
Size

50.5MB
MD5

81a9d0268f64366e20516771df0b4c59
SHA1

978f166a3108c5e610d32793f64d98d00f898129
SHA256

fc8c36ee3ab5fce1c09a75e4df83e1572d080bb74342d77cbd4e14a2fdee9666
SHA512

3603d202b03eace38985b6f6ed9a95a27855129b43e5510bf0dbb81263d4f5d9385c811a4d7908157d1d53972878a4277c7dc2f859fbcfc0d4b7ff25d41fbfed
SSDEEP

393216:Hbe4rM23fiEOrkTH1HgrBgBoBjDn6cVJ4kqfF5kuqsE:5idQTH14BgBoBHeGuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Factorsynth.exe

Files

Factorsynth.exe
.exe windows:6 windows x64 arch:x64

60af2851704c1be82bd34f5ed7bf3982

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetThreadPriority
ResetEvent
GetPriorityClass
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
TlsFree
TlsAlloc
CreateEventA
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
LocalAlloc
FileTimeToSystemTime
VerSetConditionMask
SetLastError
HeapAlloc
CreateMutexW
GetProcessHeap
SleepEx
GlobalUnlock
TlsSetValue
GetTempPathW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
WaitForMultipleObjects
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
DeviceIoControl
FlushFileBuffers
SetUnhandledExceptionFilter
ConnectNamedPipe
IsDebuggerPresent
GetDriveTypeW
MoveFileW
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
CopyFileW
FreeLibrary
GetCurrentProcessId
GlobalLock
GlobalFree
GlobalAlloc
LoadLibraryA
GlobalSize
CompareStringOrdinal
GetSystemTimeAsFileTime
GetModuleHandleW
DeleteCriticalSection
ReplaceFileW
TlsGetValue
OpenEventA
GetTickCount
GetEnvironmentVariableA
MoveFileExW
GetFileSizeEx
GetStdHandle
SwitchToThread
LoadLibraryExA
GetThreadLocale
HeapCreate
VirtualQuery
GetModuleHandleExW
WriteFile
GetCurrentProcess
GetProcAddress
GetOverlappedResult
GetCurrentDirectoryW
LoadLibraryW
GetNativeSystemInfo
CloseHandle
DeleteFileW
QueryPerformanceFrequency
TerminateThread
GetCurrentThread
SetEvent
OutputDebugStringW
GetFileAttributesExW
GetLastError
FormatMessageW
CreateEventW
GetLogicalDriveStringsW
SetFileAttributesW
DisconnectNamedPipe
GetModuleHandleA
UnmapViewOfFile
GetSystemDirectoryW
ReleaseMutex
GetCurrentThreadId
CreateFileW
GetFileAttributesW
WaitForSingleObject
VerifyVersionInfoW
FindNextFileW
EnterCriticalSection
SetPriorityClass
FindFirstFileW
CancelIo
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
SetThreadAffinityMask
CreateDirectoryW
LocalFree
AttachConsole
FindClose
GetCommandLineW
ExitProcess
HeapFree
Sleep

user32

GetWindowTextW
GetDC
ReleaseDC
EndDialog
TranslateMessage
SetFocus
EnumWindows
PeekMessageW
SendMessageW
DispatchMessageW
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
CreateWindowExW
SetWindowLongPtrW
DestroyWindow
GetFocus
SendMessageTimeoutW
PostMessageW
DefWindowProcW
GetMessageW
AttachThreadInput
GetWindowThreadProcessId
EndPaint
BeginPaint
GetCursorPos
SetCursorPos
GetAncestor
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
InvalidateRect
ReleaseCapture
GetParent
SystemParametersInfoW
EnableMenuItem
GetDesktopWindow
ShowCaret
DrawIconEx
UpdateLayeredWindow
GetClientRect
SetWindowLongW
SetCursor
ToUnicode
SetClipboardData
SetWindowsHookExW
SetCapture
DestroyCaret
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
IsChild
CreateCaret
MapWindowPoints
TrackMouseEvent
GetForegroundWindow
LoadCursorW
LoadIconW
GetClipboardData
BringWindowToTop
SetLayeredWindowAttributes
GetMessageTime
UnhookWindowsHookEx
CallWindowProcW
MoveWindow
GetWindowLongW
GetSystemMenu
GetMessageExtraInfo
GetUpdateRgn
CallNextHookEx
GetIconInfo
EnumDisplayMonitors
EnumChildWindows
MonitorFromWindow
MessageBoxW
SetWindowPos
IsWindowVisible
GetWindowRect
MapVirtualKeyW
GetMessagePos

gdi32

GetKerningPairsW
CreateCompatibleDC
EnumFontFamiliesExW
GetDeviceCaps
GetTextMetricsW
DeleteDC
GetGlyphIndicesW
GetGlyphOutlineW
DeleteObject
RemoveFontMemResourceEx
SetMapMode
CreateFontIndirectW
GetOutlineTextMetricsW
SelectObject
CombineRgn
CreateBitmap
RestoreDC
ExcludeClipRect
GetObjectW
GetRegionData
CreateRectRgn
CreateRectRgnIndirect
StretchDIBits
CreateDIBSection
SaveDC
SetMapperFlags

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

CryptDestroyHash
CryptCreateHash
CryptGenRandom
RegCloseKey
AccessCheck
GetNamedSecurityInfoW
OpenProcessToken
RegOpenKeyExW
DuplicateToken
MapGenericMask
RegQueryValueExW
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAclInformation
GetAce
FreeSid
EqualSid
AllocateAndInitializeSid
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ChangeServiceConfigW
RegOpenKeyExA
CryptHashData

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderPathW
Shell_NotifyIconW
SHGetPathFromIDListW
SHParseDisplayName
SHGetKnownFolderPath
SHBrowseForFolderW
ExtractAssociatedIconW
SHGetMalloc
DragQueryFileW
SHCreateShellItem

ole32

RevokeDragDrop
PropVariantClear
CoInitializeEx
OleCreate
CoSetProxyBlanket
RegisterDragDrop
DoDragDrop
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoCreateInstance
OleInitialize
OleSetContainedObject
OleUninitialize

oleaut32

SafeArrayAccessData
SysAllocStringLen
SysStringLen
SafeArrayGetElement
SafeArrayCreateVector
SysFreeString
VariantClear
SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayUnaccessData

msvcp140

_Mtx_lock
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?exceptions@ios_base@std@@QEAAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Mtx_init_in_situ
_Mtx_unlock
_Cnd_destroy_in_situ
_Mtx_current_owns
_Cnd_init_in_situ
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAAEBV12@XZ
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_timedwait
_Cnd_wait
_Query_perf_counter
_Xtime_get_ticks
_Cnd_broadcast
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?good@ios_base@std@@QEBA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exceptions@std@@YAHXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

wininet

InternetCrackUrlW
InternetSetFilePointer
HttpQueryInfoW
HttpSendRequestExW
InternetCloseHandle
InternetConnectW
InternetSetOptionW
InternetReadFile
InternetOpenW
FtpOpenFileW
HttpOpenRequestW
InternetWriteFile
HttpEndRequestW

ws2_32

WSAStartup
getaddrinfo
getsockopt
listen
select
WSASetLastError
htonl
closesocket
htons
freeaddrinfo
sendto
inet_ntoa
bind
ioctlsocket
inet_addr
setsockopt
WSAIoctl
WSAGetLastError
connect
ntohs
socket
WSACleanup
send
accept
recv
getsockname
__WSAFDIsSet
getpeername

shlwapi

PathStripToRootW
PathAppendW

winmm

midiOutShortMsg
midiInGetNumDevs
midiOutMessage
midiInAddBuffer
midiInClose
midiInStart
midiInGetDevCapsW
midiOutUnprepareHeader
midiInPrepareHeader
midiInReset
midiOutOpen
midiOutPrepareHeader
midiOutGetDevCapsW
midiInOpen
midiInUnprepareHeader
midiInMessage
timeGetTime
timeKillEvent
midiOutLongMsg
midiOutClose
midiOutGetNumDevs
midiInStop
timeBeginPeriod

imm32

ImmNotifyIME
ImmAssociateContextEx
ImmSetCandidateWindow
ImmGetContext
ImmGetCompositionStringW
ImmReleaseContext
ImmAssociateContext

dxgi

CreateDXGIFactory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy
memmove
memcmp
__std_type_info_name
strstr
wcsstr
memchr
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
longjmp
__std_type_info_compare
__RTtypeid
strchr
__C_specific_handler
__current_exception
__current_exception_context
memset
_CxxThrowException
__C_specific_handler_noexcept
__intrinsic_setjmp
strrchr
wcschr
__RTDynamicCast

api-ms-win-crt-heap-l1-1-0

_aligned_free
realloc
_set_new_mode
free
_callnewh
malloc
_aligned_malloc
calloc

api-ms-win-crt-math-l1-1-0

lrint
logf
log2
_finite
log10f
log10
fmod
floorf
expf
cosf
cos
_copysign
ldexp
ceilf
atanf
__setusermatherr
atan2f
log
pow
lrintf
powf
roundf
sin
sinf
exp
sqrt
atan2
round
_fdclass
_hypot
_hypotf
sqrtf
acos
tan
tanf
frexp
ceil
floor
truncf

api-ms-win-crt-runtime-l1-1-0

exit
_fpreset
_seh_filter_exe
_set_app_type
abort
_configure_narrow_argv
terminate
_initialize_narrow_environment
_get_narrow_winmain_command_line
_initterm
_initterm_e
_crt_atexit
_exit
_cexit
_beginthreadex
_c_exit
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
__sys_nerr
_endthreadex
_errno
strerror
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

fgetc
fgetpos
fputc
_fileno
freopen_s
__p__commode
fsetpos
_fseeki64
setvbuf
ungetc
__acrt_iob_func
fflush
_set_fmode
_wfopen
fputs
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fwrite
fread
__stdio_common_vsscanf
_get_stream_buffer_pointers
__stdio_common_vsnprintf_s
fopen
_wfopen_s
_ftelli64
__stdio_common_vsprintf
fgets
ftell
fseek
fclose

api-ms-win-crt-string-l1-1-0

iswlower
towupper
tolower
iswalnum
strncmp
wcscmp
_wcsdup
iswalpha
wcspbrk
wcsncmp
iswupper
iswdigit
wcscpy_s
iswspace
wcsncat_s
wcsncpy_s
towlower
strcspn
strspn
_strdup
wcsnlen
wcsncpy
strncpy
strcmp
isupper

api-ms-win-crt-convert-l1-1-0

strtoul
wcstombs
strtol
strtoll
atol
atoi
_atoi64
_strtod_l
wcstoull
_wcstoui64
strtod

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_gmtime64
_mkgmtime64
_gmtime64_s
_localtime64_s
_time64
clock
wcsftime
_ftime64_s
strftime

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
_create_locale

api-ms-win-crt-utility-l1-1-0

srand
qsort
rand

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_unlock_file
_lock_file
_unlink

winhttp

WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpOpen

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryW
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore

iphlpapi

GetAdaptersInfo

Exports

Exports

??0RubberBandStretcher@RubberBand@@QEAA@_K0HNN@Z
??0RubberBandStretcher@RubberBand@@QEAA@_K0V?$shared_ptr@ULogger@RubberBandStretcher@RubberBand@@@std@@HNN@Z
??1RubberBandStretcher@RubberBand@@QEAA@XZ
?available@RubberBandStretcher@RubberBand@@QEBAHXZ
?calculateStretch@RubberBandStretcher@RubberBand@@QEAAXXZ
?getChannelCount@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getEngineVersion@RubberBandStretcher@RubberBand@@QEBAHXZ
?getExactTimePoints@RubberBandStretcher@RubberBand@@QEBA?AV?$vector@HV?$allocator@H@std@@@std@@XZ
?getFormantScale@RubberBandStretcher@RubberBand@@QEBANXZ
?getFrequencyCutoff@RubberBandStretcher@RubberBand@@QEBAMH@Z
?getInputIncrement@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getLatency@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getOutputIncrements@RubberBandStretcher@RubberBand@@QEBA?AV?$vector@HV?$allocator@H@std@@@std@@XZ
?getPhaseResetCurve@RubberBandStretcher@RubberBand@@QEBA?AV?$vector@MV?$allocator@M@std@@@std@@XZ
?getPitchScale@RubberBandStretcher@RubberBand@@QEBANXZ
?getPreferredStartPad@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getSamplesRequired@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getStartDelay@RubberBandStretcher@RubberBand@@QEBA_KXZ
?getTimeRatio@RubberBandStretcher@RubberBand@@QEBANXZ
?process@RubberBandStretcher@RubberBand@@QEAAXPEBQEBM_K_N@Z
?reset@RubberBandStretcher@RubberBand@@QEAAXXZ
?retrieve@RubberBandStretcher@RubberBand@@QEBA_KPEBQEAM_K@Z
?setDebugLevel@RubberBandStretcher@RubberBand@@QEAAXH@Z
?setDefaultDebugLevel@RubberBandStretcher@RubberBand@@SAXH@Z
?setDetectorOption@RubberBandStretcher@RubberBand@@QEAAXH@Z
?setExpectedInputDuration@RubberBandStretcher@RubberBand@@QEAAX_K@Z
?setFormantOption@RubberBandStretcher@RubberBand@@QEAAXH@Z
?setFormantScale@RubberBandStretcher@RubberBand@@QEAAXN@Z
?setFrequencyCutoff@RubberBandStretcher@RubberBand@@QEAAXHM@Z
?setKeyFrameMap@RubberBandStretcher@RubberBand@@QEAAXAEBV?$map@_K_KU?$less@_K@std@@V?$allocator@U?$pair@$$CB_K_K@std@@@2@@std@@@Z
?setMaxProcessSize@RubberBandStretcher@RubberBand@@QEAAX_K@Z
?setPhaseOption@RubberBandStretcher@RubberBand@@QEAAXH@Z
?setPitchOption@RubberBandStretcher@RubberBand@@QEAAXH@Z
?setPitchScale@RubberBandStretcher@RubberBand@@QEAAXN@Z
?setTimeRatio@RubberBandStretcher@RubberBand@@QEAAXN@Z
?setTransientsOption@RubberBandStretcher@RubberBand@@QEAAXH@Z
?study@RubberBandStretcher@RubberBand@@QEAAXPEBQEBM_K_N@Z
rubberband_available
rubberband_calculate_stretch
rubberband_delete
rubberband_get_channel_count
rubberband_get_engine_version
rubberband_get_formant_scale
rubberband_get_latency
rubberband_get_pitch_scale
rubberband_get_preferred_start_pad
rubberband_get_samples_required
rubberband_get_start_delay
rubberband_get_time_ratio
rubberband_new
rubberband_process
rubberband_reset
rubberband_retrieve
rubberband_set_debug_level
rubberband_set_default_debug_level
rubberband_set_detector_option
rubberband_set_expected_input_duration
rubberband_set_formant_option
rubberband_set_formant_scale
rubberband_set_key_frame_map
rubberband_set_max_process_size
rubberband_set_phase_option
rubberband_set_pitch_option
rubberband_set_pitch_scale
rubberband_set_time_ratio
rubberband_set_transients_option
rubberband_study

Sections

.text
Size: 42.2MB - Virtual size: 42.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 373KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itt_not
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60af2851704c1be82bd34f5ed7bf3982

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

msvcp140

wininet

ws2_32

shlwapi

winmm

imm32

dxgi

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

winhttp

bcrypt

crypt32

iphlpapi

Exports

Exports

Sections

.text Size: 42.2MB - Virtual size: 42.2MB

IPPCODE Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 5.6MB - Virtual size: 5.6MB

.data Size: 373KB - Virtual size: 391KB

.pdata Size: 540KB - Virtual size: 539KB

IPPDATA Size: 8KB - Virtual size: 8KB

.itt_not Size: 13KB - Virtual size: 12KB

.rsrc Size: 77KB - Virtual size: 76KB

.reloc Size: 79KB - Virtual size: 78KB

.text
Size: 42.2MB - Virtual size: 42.2MB

IPPCODE
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 5.6MB - Virtual size: 5.6MB

.data
Size: 373KB - Virtual size: 391KB

.pdata
Size: 540KB - Virtual size: 539KB

IPPDATA
Size: 8KB - Virtual size: 8KB

.itt_not
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 77KB - Virtual size: 76KB

.reloc
Size: 79KB - Virtual size: 78KB