giada-1[.]0[.]0-x86_64-windows[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

giada-1.0.0-x86_64-windows.zip
Size

5.5MB
MD5

23de2a67b2fad4d838a6adb58ee1819c
SHA1

37a65cd5d38bfa32e54369772e0df1d7593879ab
SHA256

a7e20d60b293273946f1d008f8eeec2ee15c4a57628e86912064bb3084772f20
SHA512

6730e09e4361627daf0c7ae9686d522c3ff1ada06b55b6bb77e39f8c0d7d615bec83572d501abe3800c4e772c846ffe6700dcb9684f46d7520416fe512a3f3a6
SSDEEP

98304:U+LJRSI45825pUn3G46uE2DcluGTtEz/I1zlW4hqz6b4seIHeWtx/cR:hLSl5b43z6t2OuGTtEs1UVA4seIztxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/giada.exe

Files

giada-1.0.0-x86_64-windows.zip
.zip
giada.exe
.exe windows:6 windows x64 arch:x64

1b3e383f39463878e55103f8ae65c067

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipSetPenColor
GdipSetSolidFillColor
GdipSetSmoothingMode
GdipAddPathPolygonI
GdipGetPenWidth
GdipFillPath
GdipSetPenWidth
GdipDrawPath
GdipDrawLineI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetPenDashStyle
GdipSetPenDashArray
GdipCreatePen1
GdipDeletePen
GdiplusShutdown
GdipDrawArcI
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathLine2
GdipClosePathFigure
GdipDeletePath
GdipFillPieI
GdipAlloc
GdipCreatePath
GdipSetPenLineJoin
GdipSetPenEndCap
GdipFree
GdipScaleWorldTransform
GdipSetPenStartCap
GdiplusStartup

dsound

ord7
ord6
ord2
ord1

winmm

midiInUnprepareHeader
midiInAddBuffer
midiInStart
midiInStop
midiInReset
midiInMessage
timeBeginPeriod
timeEndPeriod
timeGetTime
midiOutGetNumDevs
midiOutGetDevCapsW
midiOutOpen
midiOutClose
midiOutPrepareHeader
midiOutUnprepareHeader
midiOutShortMsg
midiOutLongMsg
midiOutMessage
midiInGetNumDevs
midiInGetDevCapsW
midiInPrepareHeader
midiInGetDevCapsA
midiInClose
midiInOpen
midiOutGetDevCapsA

shlwapi

PathStripToRootW

kernel32

FindFirstFileW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetLogicalDriveStringsW
GetVolumeInformationW
ReadFile
GetCommandLineW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
WriteFile
GetTempPathW
OutputDebugStringW
SetHandleInformation
SetUnhandledExceptionFilter
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
PeekNamedPipe
CreateNamedPipeW
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
GetOverlappedResult
CancelIo
ReleaseMutex
CreateMutexW
CreateEventW
WaitForMultipleObjects
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
GetCurrentThread
GetThreadPriority
TerminateThread
CreateProcessW
SetPriorityClass
GlobalMemoryStatusEx
SetLocalTime
GetSystemDirectoryW
GetComputerNameExW
GetLogicalProcessorInformation
GetNativeSystemInfo
GetSystemFirmwareTable
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleHandleW
GetModuleHandleExW
SetThreadAffinityMask
CopyFileW
MoveFileW
ReplaceFileW
CreateSymbolicLinkW
GetLocaleInfoW
DeleteFileW
InitializeCriticalSectionAndSpinCount
GetLogicalDrives
GetComputerNameA
GetACP
GetLocaleInfoA
MulDiv
GetStdHandle
GetFileSizeEx
GetFileType
SetFilePointerEx
FormatMessageA
ExitProcess
CompareStringOrdinal
FormatMessageW
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetModuleHandleA
GetModuleFileNameW
GetCurrentProcessId
GetLastError
CreateHardLinkA
LoadLibraryA
GetTempPathA
UnlockFileEx
RemoveDirectoryA
LockFileEx
GetFullPathNameA
FindNextFileA
FindFirstFileA
FindClose
ExpandEnvironmentStringsA
WideCharToMultiByte
FoldStringW
TryEnterCriticalSection
OutputDebugStringA
IsDebuggerPresent
MultiByteToWideChar
OpenFile
LoadLibraryW
GetProcAddress
FreeLibrary
ResumeThread
SetThreadPriority
CreateThread
Sleep
CreateEventA
WaitForSingleObject
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
GetCurrentThreadId
CreateFileW
InitializeSListHead
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
RtlCaptureStackBackTrace
AttachConsole
GetPriorityClass
LocalFree
FindFirstFileExW
GetFinalPathNameByHandleW
AreFileApisANSI
GetFileInformationByHandleEx
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RemoveDirectoryW

user32

MapWindowPoints
WindowFromPoint
GetWindowLongW
SetWindowLongW
GetParent
EnumChildWindows
EnumWindows
GetWindowThreadProcessId
SetCaretPos
ShowCaret
GetDesktopWindow
CharLowerBuffA
CharUpperA
CharUpperW
CharLowerA
CharLowerW
GetWindowRect
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
RegisterWindowMessageW
DefWindowProcW
CallWindowProcW
GetForegroundWindow
LoadCursorW
DestroyCursor
LoadIconW
DrawIconEx
CreateIconIndirect
GetIconInfo
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
GetWindowInfo
GetAncestor
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageTimeoutW
GetWindowTextW
AttachThreadInput
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
SetFocus
SetForegroundWindow
InvalidateRect
GetSystemMetrics
SetActiveWindow
GetSysColor
PostThreadMessageA
MessageBoxA
GetKeyboardLayout
PeekMessageA
SendMessageA
CreateWindowExA
OpenIcon
IsIconic
GetClipboardOwner
SetClipboardViewer
ChangeClipboardChain
IsClipboardFormatAvailable
GetWindowLongPtrW
SetWindowLongPtrW
SetParent
DestroyIcon
TrackMouseEvent
PeekMessageW
GetMessagePos
GetMessageTime
GetMessageExtraInfo
SendMessageW
PostMessageW
UnregisterClassW
RegisterClassExW
CreateWindowExW
IsWindow
IsChild
UpdateLayeredWindow
SetLayeredWindowAttributes
GetWindowPlacement
IsWindowVisible
BringWindowToTop
EndDialog
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetFocus
GetAsyncKeyState
GetKeyboardState
ToUnicode
SendInput
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
GetSystemMenu
EnableMenuItem
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRgn
RedrawWindow
SetWindowTextW
GetClientRect
MessageBoxW
MessageBeep
SetCursorPos
SetCursor
GetCursorPos
CreateCaret
GetKeyState
FillRect
GetWindow
SetWindowLongA
SetRect
SetWindowRgn
PostMessageA
SystemParametersInfoA
LoadIconA
LoadCursorA
GetWindowLongA
ClientToScreen
AdjustWindowRectEx
ValidateRgn
MsgWaitForMultipleObjects
DestroyCaret

gdi32

CreateDIBSection
SetStretchBltMode
StretchDIBits
StretchBlt
SetMapMode
GetObjectW
SetBrushOrgEx
GetGlyphIndicesW
GetOutlineTextMetricsW
GetGlyphOutlineW
SelectObject
SaveDC
RestoreDC
GetRegionData
GetDeviceCaps
ExcludeClipRect
DeleteObject
DeleteDC
CreateRectRgnIndirect
CreateRectRgn
CreateCompatibleDC
CreateBitmap
EnumFontFamiliesExW
AddFontMemResourceEx
CombineRgn
CreateFontIndirectW
RemoveFontMemResourceEx
RealizePalette
GetStockObject
CreateSolidBrush
CreatePen
CreatePalette
Polyline
PolyPolygon
SetMapperFlags
GetTextMetricsW
GetKerningPairsW
SetBkMode
SetTextAlign
PlayEnhMetaFile
CreateCompatibleBitmap
ExtCreateRegion
GetWindowOrgEx
SelectPalette
SetPixel
CreatePolygonRgn
LPtoDP
SetWindowOrgEx
GetDIBits
GetObjectA
GdiFlush
GetRgnBox
SetDIBitsToDevice
UpdateColors
GetEnhMetaFileHeader
OffsetRgn
GetDCOrgEx
SetDIBits
CreateFontW
EnumFontFamiliesW
GetTextExtentPoint32W
GetCharacterPlacementW
SetTextColor
GetTextMetricsA
TextOutW
DPtoLP
EqualRgn
LineTo
RectInRegion
SelectClipRgn
ExtCreatePen
MoveToEx
Polygon
Arc
Pie
BitBlt

shell32

SHGetSpecialFolderPathW
ShellExecuteA
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
SHParseDisplayName
SHBrowseForFolderW
SHCreateShellItem
SHGetPathFromIDListW
SHGetMalloc
ExtractAssociatedIconW
DragQueryFileW
Shell_NotifyIconW
SHFileOperationW
SHGetKnownFolderPath

ole32

CoCreateInstance
PropVariantClear
CoInitialize
CLSIDFromString
CoCreateGuid
OleCreate
OleSetContainedObject
CoUninitialize
CoTaskMemAlloc
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
ReleaseStgMedium
CoInitializeEx
CoTaskMemFree

oleaut32

SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SysAllocString

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

GetUserNameW
RegSetValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
AccessCheck
DuplicateToken
MapGenericMask
GetNamedSecurityInfoW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW

msvcp140

??0_Locinfo@std@@QEAA@PEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?classic@locale@std@@SAAEBV12@XZ
_Cnd_signal
_Cnd_broadcast
_Cnd_timedwait
_Cnd_wait
_Cnd_init_in_situ
_Mtx_current_owns
_Cnd_destroy_in_situ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?uncaught_exceptions@std@@YAHXZ
_Thrd_sleep
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?good@ios_base@std@@QEBA_NXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_init_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_join
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
_Mtx_destroy_in_situ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Locinfo@std@@QEAA@XZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?id@?$numpunct@D@std@@2V0locale@2@A

mfplat

MFCreateSample
MFCreateMemoryBuffer
MFShutdown
MFStartup
MFCreateMediaType

wininet

HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
HttpOpenRequestW
FtpOpenFileW
InternetSetOptionW
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetCrackUrlW
InternetOpenW

ws2_32

ioctlsocket
getpeername
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
WSAStartup
WSAGetLastError
getaddrinfo
freeaddrinfo
closesocket
bind
accept
__WSAFDIsSet
connect

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

imm32

ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmNotifyIME
ImmSetCandidateWindow

comctl32

_TrackMouseEvent

dxgi

CreateDXGIFactory

dbghelp

SymFromAddr
SymInitialize
SymGetModuleInfo64

vcruntime140

memcmp
memmove
__intrinsic_setjmp
__current_exception_context
__current_exception
__C_specific_handler
strstr
longjmp
__std_type_info_compare
__RTtypeid
strchr
wcsrchr
strrchr
memchr
__RTDynamicCast
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
memcpy
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_set_abort_behavior
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
exit
_wsystem
_errno
_exit
_initterm_e
_initterm
strerror
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
raise
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_fpreset
_crt_atexit
_cexit
_seh_filter_exe
_endthreadex
_set_app_type
_get_initial_narrow_environment
_beginthreadex
terminate
abort

api-ms-win-crt-heap-l1-1-0

free
malloc
_aligned_malloc
_set_new_mode
realloc
_callnewh
_aligned_free
calloc

api-ms-win-crt-convert-l1-1-0

_atoi64
atof
atol
wcstombs
strtof
strtol
strtoul
strtoull
strtoll
strtod
_strtoi64
mbstowcs
_strtod_l
atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
ungetc
setvbuf
_get_osfhandle
ferror
fwrite
_fseeki64
freopen_s
_fileno
fsetpos
_close
fread
_wsopen_dispatch
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vswprintf
__stdio_common_vswscanf
fopen
fseek
_set_fmode
__stdio_common_vfprintf
tmpfile
rewind
__stdio_common_vsscanf
__p__commode
_getcwd
_lseek
getc
feof
_read
_wfopen
__acrt_iob_func
ftell
fgets

api-ms-win-crt-filesystem-l1-1-0

remove
_wmkdir
_waccess
_wchmod
_wunlink
_wchdir
_wstat64i32
_mkdir
_stat64i32
_wrename
_lock_file
_access
_unlock_file
_wrmdir

api-ms-win-crt-locale-l1-1-0

setlocale
_configthreadlocale
_create_locale
___lc_codepage_func
localeconv

api-ms-win-crt-math-l1-1-0

asinh
atanh
asin
atan
round
atan2f
modf
truncf
tanf
cosh
sinh
sqrtf
tan
_dclass
sqrt
tanh
sinf
log
fmod
ldexp
cosf
_dsign
ceilf
floorf
lround
__setusermatherr
cos
log10f
pow
llround
llroundf
atan2
exp
logf
sin
acos
_hypotf
_hypot
_fdclass
log10
floor
ceil
acosf
_isnan
atanf
roundf
_finite
lrint
_ldclass
acosh
trunc
fmodf
frexp
expf
powf

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
isxdigit
tolower
strcspn
_strdup
isupper
islower
_memccpy
strcmp
_wcsnicmp
_wcsicmp
iswalnum
iswalpha
iswdigit
_stricmp
toupper
isalnum
isspace
isdigit
_strnicmp
towlower
towupper
iswupper
iswprint
iswspace
iswlower
isalpha
isprint
strncat
strnlen

api-ms-win-crt-utility-l1-1-0

qsort
rand
bsearch

api-ms-win-crt-environment-l1-1-0

_wgetcwd
getenv
_wputenv
_wgetenv

api-ms-win-crt-time-l1-1-0

_get_tzname
_gmtime64_s
_localtime64_s
_mktime64
_tzset
_time64
_ftime64
_ftime64_s
_gmtime64
wcsftime

api-ms-win-crt-process-l1-1-0

_wexecvp

Exports

Exports

??0MidiApi@@QEAA@AEBV0@@Z
??0MidiApi@@QEAA@XZ
??0MidiInApi@@QEAA@AEBV0@@Z
??0MidiInApi@@QEAA@I@Z
??0MidiOutApi@@QEAA@AEBV0@@Z
??0MidiOutApi@@QEAA@XZ
??0RtMidi@@IEAA@XZ
??0RtMidi@@QEAA@$$QEAV0@@Z
??0RtMidiError@@QEAA@AEBV0@@Z
??0RtMidiError@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@0@@Z
??0RtMidiIn@@QEAA@$$QEAV0@@Z
??0RtMidiIn@@QEAA@W4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
??0RtMidiOut@@QEAA@$$QEAV0@@Z
??0RtMidiOut@@QEAA@W4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1MidiApi@@UEAA@XZ
??1MidiInApi@@UEAA@XZ
??1MidiOutApi@@UEAA@XZ
??1RtMidi@@MEAA@XZ
??1RtMidiError@@UEAA@XZ
??1RtMidiIn@@UEAA@XZ
??1RtMidiOut@@UEAA@XZ
??4MidiApi@@QEAAAEAV0@AEBV0@@Z
??4MidiInApi@@QEAAAEAV0@AEBV0@@Z
??4MidiOutApi@@QEAAAEAV0@AEBV0@@Z
??4RtMidiError@@QEAAAEAV0@AEBV0@@Z
??_7MidiApi@@6B@
??_7MidiInApi@@6B@
??_7MidiOutApi@@6B@
??_7RtMidi@@6B@
??_7RtMidiError@@6B@
??_7RtMidiIn@@6B@
??_7RtMidiOut@@6B@
??_FRtMidiIn@@QEAAXXZ
??_FRtMidiOut@@QEAAXXZ
?cancelCallback@MidiInApi@@QEAAXXZ
?cancelCallback@RtMidiIn@@QEAAXXZ
?closePort@RtMidiIn@@UEAAXXZ
?closePort@RtMidiOut@@UEAAXXZ
?error@MidiApi@@QEAAXW4Type@RtMidiError@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getApiDisplayName@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Api@1@@Z
?getApiName@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Api@1@@Z
?getCompiledApi@RtMidi@@SAXAEAV?$vector@W4Api@RtMidi@@V?$allocator@W4Api@RtMidi@@@std@@@std@@@Z
?getCompiledApiByName@RtMidi@@SA?AW4Api@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getCurrentApi@RtMidiIn@@QEAA?AW4Api@RtMidi@@XZ
?getCurrentApi@RtMidiOut@@QEAA?AW4Api@RtMidi@@XZ
?getMessage@MidiInApi@@QEAANPEAV?$vector@EV?$allocator@E@std@@@std@@@Z
?getMessage@RtMidiError@@UEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getMessage@RtMidiIn@@QEAANPEAV?$vector@EV?$allocator@E@std@@@std@@@Z
?getPortCount@RtMidiIn@@UEAAIXZ
?getPortCount@RtMidiOut@@UEAAIXZ
?getPortName@RtMidiIn@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?getPortName@RtMidiOut@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?getType@RtMidiError@@UEBAAEBW4Type@1@XZ
?getVersion@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?ignoreTypes@MidiInApi@@UEAAX_N00@Z
?ignoreTypes@RtMidiIn@@QEAAX_N00@Z
?isPortOpen@MidiApi@@QEBA_NXZ
?isPortOpen@RtMidiIn@@UEBA_NXZ
?isPortOpen@RtMidiOut@@UEBA_NXZ
?openMidiApi@RtMidiIn@@IEAAXW4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?openMidiApi@RtMidiOut@@IEAAXW4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?openPort@RtMidiIn@@UEAAXIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?openPort@RtMidiOut@@UEAAXIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?openVirtualPort@RtMidiIn@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?openVirtualPort@RtMidiOut@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?printMessage@RtMidiError@@UEBAXXZ
?sendMessage@RtMidiOut@@QEAAXPEBE_K@Z
?sendMessage@RtMidiOut@@QEAAXPEBV?$vector@EV?$allocator@E@std@@@std@@@Z
?setBufferSize@MidiInApi@@UEAAXII@Z
?setBufferSize@RtMidiIn@@UEAAXII@Z
?setCallback@MidiInApi@@QEAAXP6AXNPEAV?$vector@EV?$allocator@E@std@@@std@@PEAX@Z1@Z
?setCallback@RtMidiIn@@QEAAXP6AXNPEAV?$vector@EV?$allocator@E@std@@@std@@PEAX@Z1@Z
?setClientName@RtMidi@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setErrorCallback@MidiApi@@QEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z
?setErrorCallback@RtMidiIn@@UEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z
?setErrorCallback@RtMidiOut@@UEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z
?setPortName@RtMidi@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?what@RtMidiError@@UEBAPEBDXZ

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b3e383f39463878e55103f8ae65c067

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

dsound

winmm

shlwapi

kernel32

user32

gdi32

shell32

ole32

oleaut32

comdlg32

advapi32

msvcp140

mfplat

wininet

ws2_32

version

imm32

comctl32

dxgi

dbghelp

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-process-l1-1-0

Exports

Exports

Sections

.text Size: 6.9MB - Virtual size: 6.9MB

.rdata Size: 5.7MB - Virtual size: 5.7MB

.data Size: 242KB - Virtual size: 528KB

.pdata Size: 316KB - Virtual size: 316KB

.rodata Size: 1024B - Virtual size: 932B

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 104KB - Virtual size: 104KB

.text
Size: 6.9MB - Virtual size: 6.9MB

.rdata
Size: 5.7MB - Virtual size: 5.7MB

.data
Size: 242KB - Virtual size: 528KB

.pdata
Size: 316KB - Virtual size: 316KB

.rodata
Size: 1024B - Virtual size: 932B

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 104KB - Virtual size: 104KB