MIDI++[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MIDI++.exe
Size 906KB
Sample260708-vrrwwaev2v
SHA256 6c170cd38c5d556be21457ca1c6e1ecadcff46b99659261408f472d502213c44
MD5 ecc681ccf8166d8f331358b583e9aa93
SHA1 04b3327015c5b0b55ceb4d4baa544f4508fc3c41
SHA512 64172fb7b0f2bd9988dc35d0e884fd6654923b576026ee12f397212c7ef3d766870848b9c68dd24ab26916b2538f069121083be8c2c5897b81e4f0eef8a5975b
SSDEEP 24576:CUpyHYc7NXW/n7uU6IPfHKW6elk2Z+sG41o8a8uj:CGohEnS8XKWVk2AsG41oeu
TLSH
T16C158E1ABA6801FCD877C279CA5A9912F2B2784707604BDF13A0466B3F276E05E7F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MIDI++.exe

File Explorer

MIDI++.exe

.exe 906KB

MIDI++.exe

IMPHASH 449852a594fa88f18f76145d78514e07
SHA256 6c170cd38c5d556be21457ca1c6e1ecadcff46b99659261408f472d502213c44
MD5 ecc681ccf8166d8f331358b583e9aa93
SHA1 04b3327015c5b0b55ceb4d4baa544f4508fc3c41
SHA512 64172fb7b0f2bd9988dc35d0e884fd6654923b576026ee12f397212c7ef3d766870848b9c68dd24ab26916b2538f069121083be8c2c5897b81e4f0eef8a5975b
SSDEEP 24576:CUpyHYc7NXW/n7uU6IPfHKW6elk2Z+sG41o8a8uj:CGohEnS8XKWVk2AsG41oeu
TLSH
T16C158E1ABA6801FCD877C279CA5A9912F2B2784707604BDF13A0466B3F276E05E7F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

472256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Zeph\source\repos\MIDI++\x64\Release\MIDI++.pdb

kernel32

SetEndOfFile WriteConsoleW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapSize HeapReAlloc ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType SetFilePointerEx GetFileSizeEx WriteFile GetStdHandle GetModuleFileNameW ExitProcess FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent TerminateProcess DeleteCriticalSection Sleep LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection CreateWaitableTimerExW ResetEvent CreateEventW GetModuleHandleA WaitForSingleObject WaitForMultipleObjects CreateWaitableTimerW SetWaitableTimer GetProcAddress GetModuleHandleW GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo CompareStringEx GetSystemTimeAsFileTime LCMapStringEx LoadLibraryA WideCharToMultiByte GetLocalTime CloseHandle DecodePointer EncodePointer InitializeCriticalSectionEx GetNativeSystemInfo GetExitCodeThread WaitForSingleObjectEx TryAcquireSRWLockExclusive GetStringTypeW InitOnceBeginInitialize InitOnceComplete QueryPerformanceFrequency QueryPerformanceCounter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent GetCurrentThreadId RaiseException RtlPcToFileHeader GetFileInformationByHandleEx RtlUnwind CopyFileW AreFileApisANSI SetFileInformationByHandle SetEvent GetLastError MultiByteToWideChar CreateMutexW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle

user32

GetWindowTextW ReleaseDC IsIconic InvalidateRect SetForegroundWindow UpdateWindow PostQuitMessage DrawTextW GetDlgItem SetWindowLongW SendMessageA LoadCursorW FindWindowW LoadIconW TranslateMessage SetLayeredWindowAttributes MessageBoxA DrawFocusRect FrameRect GetDlgCtrlID SetTimer DispatchMessageW IsWindow ShowWindow RegisterClassExW SetWindowTextW SendMessageW CreateWindowExW FillRect SetWindowPos IsWindowVisible GetDC InflateRect DestroyWindow SendMessageTimeoutW PostMessageW DefWindowProcW GetMessageW GetWindowLongW MapVirtualKeyW VkKeyScanA EndPaint BeginPaint SystemParametersInfoW DrawEdge SetScrollPos GetSysColorBrush GetClientRect GetSysColor TrackMouseEvent DrawTextA OffsetRect GetScrollPos GetWindowLongPtrW GetScrollInfo SetWindowLongPtrW SetScrollInfo ReleaseCapture SetCapture UnregisterClassW MessageBoxW GetWindowRect

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC SelectObject GetStockObject GetTextExtentPoint32W SetTextColor SetBkMode GetObjectW SetBkColor DeleteObject CreateSolidBrush CreateFontIndirectW

winmm

midiInGetDevCapsW midiInOpen midiInClose midiInGetNumDevs timeGetDevCaps timeEndPeriod timeBeginPeriod midiInUnprepareHeader midiOutGetDevCapsW midiOutPrepareHeader midiOutOpen midiInReset midiInPrepareHeader midiOutUnprepareHeader midiInStart midiInAddBuffer midiOutShortMsg midiOutGetNumDevs midiOutLongMsg midiOutClose midiInStop

comctl32

ord410 ord413 InitCommonControlsEx

gdiplus

GdiplusShutdown GdiplusStartup GdipSetPathGradientSurroundColorsWithCount GdipAddPathLine2 GdipSetStringFormatAlign GdipCreatePen1 GdipDeletePen GdipTranslateWorldTransform GdipDrawLines GdipDeleteFont GdipCreatePathGradientFromPath GdipDeleteGraphics GdipGetPathGradientPointCount GdipMeasureString GdipCloneBrush GdipRotateWorldTransform GdipSetTextRenderingHint GdipSetPenEndCap GdipFillEllipse GdipCreateFromHDC GdipSetPenLineJoin GdipResetWorldTransform GdipDrawString GdipFree GdipClosePathFigure GdipAddPathEllipse GdipFillRectangle GdipDrawRectangle GdipDrawLine GdipFillPath GdipCreateSolidFill GdipCreateFont GdipCreatePath GdipSetSmoothingMode GdipSetPathGradientCenterColor GdipDeletePath GdipAlloc GdipDeleteBrush GdipSetPenStartCap GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipCreateStringFormat GdipDeleteStringFormat

avrt

AvSetMmThreadPriority AvSetMmThreadCharacteristicsW AvRevertMmThreadCharacteristics

??0MidiApi@@QEAA@AEBV0@@Z ??0MidiApi@@QEAA@XZ ??0MidiInApi@@QEAA@AEBV0@@Z ??0MidiInApi@@QEAA@I@Z ??0MidiOutApi@@QEAA@AEBV0@@Z ??0MidiOutApi@@QEAA@XZ ??0RtMidi@@IEAA@XZ ??0RtMidi@@QEAA@$$QEAV0@@Z ??0RtMidiError@@QEAA@AEBV0@@Z ??0RtMidiError@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@0@@Z ??0RtMidiIn@@QEAA@$$QEAV0@@Z ??0RtMidiIn@@QEAA@W4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ??0RtMidiOut@@QEAA@$$QEAV0@@Z ??0RtMidiOut@@QEAA@W4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??1MidiApi@@UEAA@XZ ??1MidiInApi@@UEAA@XZ ??1MidiOutApi@@UEAA@XZ ??1RtMidi@@MEAA@XZ ??1RtMidiError@@UEAA@XZ ??1RtMidiIn@@UEAA@XZ ??1RtMidiOut@@UEAA@XZ ??4MidiApi@@QEAAAEAV0@AEBV0@@Z ??4MidiInApi@@QEAAAEAV0@AEBV0@@Z ??4MidiOutApi@@QEAAAEAV0@AEBV0@@Z ??4RtMidiError@@QEAAAEAV0@AEBV0@@Z ??_7MidiApi@@6B@ ??_7MidiInApi@@6B@ ??_7MidiOutApi@@6B@ ??_7RtMidi@@6B@ ??_7RtMidiError@@6B@ ??_7RtMidiIn@@6B@ ??_7RtMidiOut@@6B@ ??_FRtMidiIn@@QEAAXXZ ??_FRtMidiOut@@QEAAXXZ ?__autoclassinit2@MidiApi@@QEAAX_K@Z ?__autoclassinit2@MidiInApi@@QEAAX_K@Z ?__autoclassinit2@MidiOutApi@@QEAAX_K@Z ?__autoclassinit2@RtMidi@@QEAAX_K@Z ?__autoclassinit2@RtMidiIn@@QEAAX_K@Z ?__autoclassinit2@RtMidiOut@@QEAAX_K@Z ?cancelCallback@MidiInApi@@QEAAXXZ ?cancelCallback@RtMidiIn@@QEAAXXZ ?closePort@RtMidiIn@@UEAAXXZ ?closePort@RtMidiOut@@UEAAXXZ ?error@MidiApi@@QEAAXW4Type@RtMidiError@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?getApiDisplayName@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Api@1@@Z ?getApiName@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Api@1@@Z ?getCompiledApi@RtMidi@@SAXAEAV?$vector@W4Api@RtMidi@@V?$allocator@W4Api@RtMidi@@@std@@@std@@@Z ?getCompiledApiByName@RtMidi@@SA?AW4Api@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?getCurrentApi@RtMidiIn@@QEAA?AW4Api@RtMidi@@XZ ?getCurrentApi@RtMidiOut@@QEAA?AW4Api@RtMidi@@XZ ?getMessage@MidiInApi@@UEAANPEAV?$vector@EV?$allocator@E@std@@@std@@@Z ?getMessage@RtMidiError@@UEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getMessage@RtMidiIn@@QEAANPEAV?$vector@EV?$allocator@E@std@@@std@@@Z ?getPortCount@RtMidiIn@@UEAAIXZ ?getPortCount@RtMidiOut@@UEAAIXZ ?getPortName@RtMidiIn@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?getPortName@RtMidiOut@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?getType@RtMidiError@@UEBAAEBW4Type@1@XZ ?getVersion@RtMidi@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?ignoreTypes@MidiInApi@@UEAAX_N00@Z ?ignoreTypes@RtMidiIn@@QEAAX_N00@Z ?isPortOpen@MidiApi@@QEBA_NXZ ?isPortOpen@RtMidiIn@@UEBA_NXZ ?isPortOpen@RtMidiOut@@UEBA_NXZ ?openMidiApi@RtMidiIn@@IEAAXW4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?openMidiApi@RtMidiOut@@IEAAXW4Api@RtMidi@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?openPort@RtMidiIn@@UEAAXIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?openPort@RtMidiOut@@UEAAXIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?openVirtualPort@RtMidiIn@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?openVirtualPort@RtMidiOut@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?printMessage@RtMidiError@@UEBAXXZ ?sendMessage@RtMidiOut@@QEAAXPEBE_K@Z ?sendMessage@RtMidiOut@@QEAAXPEBV?$vector@EV?$allocator@E@std@@@std@@@Z ?setBufferSize@MidiInApi@@UEAAXII@Z ?setBufferSize@RtMidiIn@@UEAAXII@Z ?setCallback@MidiInApi@@QEAAXP6AXNPEAV?$vector@EV?$allocator@E@std@@@std@@PEAX@Z1@Z ?setCallback@RtMidiIn@@QEAAXP6AXNPEAV?$vector@EV?$allocator@E@std@@@std@@PEAX@Z1@Z ?setClientName@RtMidi@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?setErrorCallback@MidiApi@@QEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z ?setErrorCallback@RtMidiIn@@UEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z ?setErrorCallback@RtMidiOut@@UEAAXP6AXW4Type@RtMidiError@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z2@Z ?setPortName@RtMidi@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?what@RtMidiError@@UEBAPEBDXZ