FabFilter Pro-C 2[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
FabFilter Pro-C 2.dll
Size 2.5MB
Sample260623-tgjbbad18n
SHA256 69ce64f45f8f086c237691f2a41b2c33b08d30ec8c94c80d59e78859410f0cd1
MD5 cfc7b2cefca5c97417c3551189f344b4
SHA1 6bf079aaf9fe49e529f46f705bf53c8e8322f226
SHA512 4f53263884591a8dee6a36c132116e359b7e940ebf462f60425afa747d5cfff6738dd71d76dbe91c504c9d454d61de4db92d277aedcd7ffcf3139ae2d267993c
SSDEEP 24576:WngIVscWbbh/cBWkurlQ+N5vEQiuxbgItcEJNEODTM1E+ecm4wxSHLQ6Mwv+TjEw:6sxxEBWLa65MXu9DJpT8NkgxZWVxP
TLSH
T1E9C5BF46B2A001D8C0BAD17D85AB951BEB7278480770A7DF23D14AAF1F63BE14D7B361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FabFilter Pro-C 2.dll

File Explorer

FabFilter Pro-C 2.dll

.dll 2.5MB

FabFilter Pro-C 2.dll

IMPHASH fd14fc1643e3144ade81f3d099513948
SHA256 69ce64f45f8f086c237691f2a41b2c33b08d30ec8c94c80d59e78859410f0cd1
MD5 cfc7b2cefca5c97417c3551189f344b4
SHA1 6bf079aaf9fe49e529f46f705bf53c8e8322f226
SHA512 4f53263884591a8dee6a36c132116e359b7e940ebf462f60425afa747d5cfff6738dd71d76dbe91c504c9d454d61de4db92d277aedcd7ffcf3139ae2d267993c
SSDEEP 24576:WngIVscWbbh/cBWkurlQ+N5vEQiuxbgItcEJNEODTM1E+ecm4wxSHLQ6Mwv+TjEw:6sxxEBWLa65MXu9DJpT8NkgxZWVxP
TLSH
T1E9C5BF46B2A001D8C0BAD17D85AB951BEB7278480770A7DF23D14AAF1F63BE14D7B361
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1041576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Frederik\Documents\FabFilter\Projects\Pro-C\Windows\x64\Release VST\FabFilter Pro-C 2.pdb

winmm

timeGetTime

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

opengl32

glBindTexture glTexParameteri glTexImage2D glPixelStorei glTexSubImage2D glGetString glMatrixMode glLoadIdentity glShadeModel glDisable glTexEnvi glEnable glBlendFunc glEnableClientState glTexCoordPointer wglGetProcAddress glClear glDrawElements glDrawArrays glDisableClientState glScissor glColor4f glViewport glOrtho glVertexPointer glColorPointer wglDeleteContext wglMakeCurrent wglCreateContext glGenTextures glDeleteTextures

kernel32

HeapAlloc HeapFree EnumSystemLocalesW GetUserDefaultLCID IsValidLocale ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FindClose FindFirstFileW FindNextFileW QueryPerformanceCounter QueryPerformanceFrequency FindResourceW VerSetConditionMask VerifyVersionInfoW CreateDirectoryW LoadResource LockResource SizeofResource GetFileAttributesW GetCurrentThreadId GetModuleHandleW GetModuleFileNameW Sleep MultiByteToWideChar WideCharToMultiByte IsDebuggerPresent CloseHandle SetEvent WaitForSingleObject ResetEvent GetFileType GetProcAddress MulDiv CreateEventW SetThreadPriority GlobalLock GlobalUnlock LoadLibraryExW FreeLibrary GetLastError RaiseException RtlPcToFileHeader InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx TerminateProcess GetCurrentProcess GetCurrentProcessId IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError DecodePointer EncodePointer GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetFileSizeEx GetCommandLineW ReadConsoleW GetTimeZoneInformation GetStdHandle HeapReAlloc FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA CreateFileW HeapSize WriteConsoleW SetEndOfFile LoadLibraryW RtlUnwind SetStdHandle

user32

TrackPopupMenuEx DestroyMenu UpdateWindow InsertMenuItemW CreatePopupMenu DrawTextW FillRect ReleaseDC GetDC GetAncestor GetMonitorInfoW MonitorFromWindow LoadCursorW SetFocus CallWindowProcW SetWindowPos GetWindowRect GetWindowLongW GetParent EnumThreadWindows wsprintfW EnumDisplayMonitors SetRectEmpty IsWindowVisible MessageBoxW DefWindowProcW GetWindowLongPtrW PostMessageW UnregisterClassW DestroyWindow SetWindowLongPtrW CreateWindowExW RegisterClassW GetKeyState SetTimer SendMessageW SetCapture ReleaseCapture GetCursorPos PtInRect InvalidateRect SystemParametersInfoW MapWindowPoints GetWindowPlacement SetWindowPlacement GetGUIThreadInfo EqualRect SetCursor GetClassLongPtrW BeginPaint EndPaint GetSystemMetrics GetDoubleClickTime EnableWindow IsWindowEnabled EndDialog DialogBoxParamW GetDlgItem GetWindowTextLengthW GetWindowTextW OpenClipboard CloseClipboard SetWindowTextW GetClipboardData KillTimer

gdi32

DeleteDC SetBkColor SwapBuffers CreateDIBSection CreateFontIndirectW SetPixelFormat SetTextColor BitBlt SelectObject CreateCompatibleDC DeleteObject ChoosePixelFormat GetStockObject GetDeviceCaps

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegCloseKey RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegSetValueExW

shell32

SHGetSpecialFolderLocation SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc ShellExecuteW

ole32

OleUninitialize OleInitialize CoCreateGuid

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

376KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

57KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

635KB

Virtual Size

635KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FabFilter Pro-C 2.dll

winmm

version

opengl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

generic