VSTPluginMain
Static task
static1
Behavioral task
behavioral1
Sample
5585fba817b7dee727571a943606a7a0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5585fba817b7dee727571a943606a7a0N.dll
Resource
win10v2004-20240802-en
General
-
Target
5585fba817b7dee727571a943606a7a0N.exe
-
Size
3.9MB
-
MD5
5585fba817b7dee727571a943606a7a0
-
SHA1
f15e3811e59a92b941e40bd0833992160c56c517
-
SHA256
12cbd8fe589cbd823e501bd5e2fb8c5e9e8bad701b866b28c2b3f174cb2431a3
-
SHA512
46078cc2f7fca6ee5aeae77d1e818586f8b67300ceca1cd6575ed8d691976d32cf3fa79ad6ccf193152c717507bf9c84f89b5472dd64ea9d238377bbf213ca43
-
SSDEEP
49152:ugD808p5cUHqqKnsB0sxVu3JvP4xVs1U4tIaWkTR8zbE4Z2LRc8wQxlcQn8eJKvw:h8Hx0J3yB9eJKva9pCY6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5585fba817b7dee727571a943606a7a0N.exe
Files
-
5585fba817b7dee727571a943606a7a0N.exe.dll windows:6 windows x64 arch:x64
71db671e698118a3bb7e60a66b96af30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
FormatMessageW
GetLastError
GetFileAttributesExW
OutputDebugStringW
SetEvent
TerminateThread
QueryPerformanceFrequency
DeleteFileW
CloseHandle
GetNativeSystemInfo
LoadLibraryW
GetCurrentDirectoryW
GetOverlappedResult
GetProcAddress
ReplaceFileW
DeleteCriticalSection
ExitProcess
GetModuleHandleW
FreeLibrary
CreateEventW
MapViewOfFile
QueryPerformanceCounter
MoveFileW
GetDriveTypeW
IsDebuggerPresent
ConnectNamedPipe
SetUnhandledExceptionFilter
FlushFileBuffers
GetCommandLineW
GlobalSize
GlobalAlloc
GlobalLock
GetCurrentProcessId
GlobalUnlock
GetLogicalDriveStringsW
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
Sleep
DisconnectNamedPipe
UnmapViewOfFile
GetModuleHandleA
GetSystemDirectoryW
GetCurrentThreadId
ReleaseMutex
GetFileAttributesW
CreateFileW
WaitForSingleObject
FindClose
CreateMutexW
GetTempPathW
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
WaitForMultipleObjects
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
GetModuleHandleExW
WriteFile
GetCurrentProcess
FindNextFileW
EnterCriticalSection
FindFirstFileW
CancelIo
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
SetThreadAffinityMask
CreateDirectoryW
GetThreadPriority
GetCurrentThread
CreateFileMappingW
user32
FindWindowExW
DispatchMessageW
PeekMessageW
EnumWindows
SetFocus
TranslateMessage
GetAncestor
UnhookWindowsHookEx
SetWindowsHookExA
GetClassNameA
GetSystemMetrics
CallNextHookEx
MapVirtualKeyW
GetMessagePos
GetUpdateRgn
GetMessageExtraInfo
GetSystemMenu
GetWindowLongW
MoveWindow
GetDC
IsWindowVisible
MessageBoxW
EnumChildWindows
EnumDisplayMonitors
GetIconInfo
ScreenToClient
SendMessageW
EndDialog
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
CallWindowProcW
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
IsChild
CreateCaret
TrackMouseEvent
GetForegroundWindow
GetMessageTime
SetLayeredWindowAttributes
GetClipboardData
FindWindowW
LoadCursorW
DestroyCaret
SetCapture
SetClipboardData
ToUnicode
SetCursor
SetWindowLongW
GetClientRect
UpdateLayeredWindow
DrawIconEx
ShowCaret
GetDesktopWindow
EnableMenuItem
SystemParametersInfoW
GetParent
ReleaseCapture
SetForegroundWindow
InvalidateRect
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetMessageW
DefWindowProcW
PostMessageW
SendMessageTimeoutW
GetFocus
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
GetWindowLongPtrW
RegisterClassExW
GetKeyboardState
PostMessageA
SetWindowPos
GetWindowRect
AttachThreadInput
GetWindowThreadProcessId
GetWindowTextW
gdi32
CreateBitmap
SetMapMode
DeleteObject
RestoreDC
ExcludeClipRect
GetObjectW
GetRegionData
DeleteDC
CreateRectRgn
GetDeviceCaps
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleDC
CreateDIBSection
SelectObject
SaveDC
GetOutlineTextMetricsW
CreateFontIndirectW
RemoveFontMemResourceEx
GetGlyphOutlineW
GetGlyphIndicesW
SetMapperFlags
GetTextMetricsW
EnumFontFamiliesExW
GetKerningPairsW
CombineRgn
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHGetSpecialFolderPathW
SHCreateShellItem
SHGetMalloc
ExtractAssociatedIconW
SHBrowseForFolderW
SHParseDisplayName
ole32
OleCreate
OleUninitialize
RevokeDragDrop
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
OleSetContainedObject
CoCreateInstance
DoDragDrop
RegisterDragDrop
OleInitialize
msvcp140
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Xtime_get_ticks
_Cnd_wait
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
_Cnd_timedwait
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?classic@locale@std@@SAAEBV12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_init_in_situ
_Mtx_current_owns
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Dtest
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
wininet
InternetCrackUrlW
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle
InternetConnectW
InternetSetOptionW
InternetReadFile
InternetOpenW
FtpOpenFileW
InternetWriteFile
InternetSetFilePointer
HttpOpenRequestW
HttpQueryInfoW
ws2_32
__WSAFDIsSet
htonl
getsockopt
accept
bind
closesocket
inet_ntoa
freeaddrinfo
sendto
ioctlsocket
setsockopt
htons
select
getaddrinfo
WSAStartup
inet_addr
send
recv
shlwapi
PathStripToRootW
winmm
timeGetTime
timeBeginPeriod
timeKillEvent
imm32
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow
vcruntime140
_CxxThrowException
memset
__C_specific_handler
strchr
longjmp
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__intrinsic_setjmp
__RTDynamicCast
memchr
memcmp
memcpy
memmove
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
malloc
free
realloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
terminate
_errno
_fpreset
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_endthreadex
_beginthreadex
exit
api-ms-win-crt-math-l1-1-0
floorf
floor
expf
exp
cosf
log
cos
log10f
ceilf
ceil
fmod
atanf
_hypot
atan2f
_hypotf
_fdtest
atan2
acos
frexp
logf
pow
powf
sin
round
log2
ldexp
sinf
sqrt
sqrtf
tan
truncf
tanf
_copysign
_finite
roundf
api-ms-win-crt-time-l1-1-0
_ftime64_s
wcsftime
_localtime64_s
api-ms-win-crt-string-l1-1-0
strcmp
iswdigit
iswalnum
iswlower
towlower
towupper
iswspace
strncmp
iswalpha
iswupper
api-ms-win-crt-stdio-l1-1-0
fclose
fseek
__stdio_common_vsscanf
fread
__acrt_iob_func
__stdio_common_vfprintf
fwrite
fflush
api-ms-win-crt-convert-l1-1-0
atoi
strtod
_atoi64
_strtod_l
api-ms-win-crt-locale-l1-1-0
_create_locale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
Exports
Exports
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ