FabFilter Pro-Q 3[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
FabFilter Pro-Q 3.dll
Size 2.9MB
Sample260718-nc8gracy5z
SHA256 3e50c561f846457f29d80425eacdf6d5a810313b045fb23ca8cc3d97eb61c6d9
MD5 47badbefc43130ed2317dc706bff4272
SHA1 18e80547c1e0831d7669acd31ebc5d2f5e059c67
SHA512 ca9d2df1dfddba1260ad99bbc192636f040d97cdcbcabf671cffed55980dfbd6ce701a43ae756dfb650e117d1439daa24c5075660704b6a357f149c0407fa2c6
SSDEEP 49152:okLhs9qhn5CQuybqVld0IQEYpkQgHdvw6TAu7RCQJfvHdQjz7:rvby7Hdr7RlJfvHdY
TLSH
T14BE5AF4BB6A001D4C1AAC17986E7951FEB7274940360A7EF12D2467E1F637F04EBB362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FabFilter Pro-Q 3.dll

File Explorer

FabFilter Pro-Q 3.dll

.dll 2.9MB

FabFilter Pro-Q 3.dll

IMPHASH dc2b62c587bee83fc90530f26e0f99c7
SHA256 3e50c561f846457f29d80425eacdf6d5a810313b045fb23ca8cc3d97eb61c6d9
MD5 47badbefc43130ed2317dc706bff4272
SHA1 18e80547c1e0831d7669acd31ebc5d2f5e059c67
SHA512 ca9d2df1dfddba1260ad99bbc192636f040d97cdcbcabf671cffed55980dfbd6ce701a43ae756dfb650e117d1439daa24c5075660704b6a357f149c0407fa2c6
SSDEEP 49152:okLhs9qhn5CQuybqVld0IQEYpkQgHdvw6TAu7RCQJfvHdQjz7:rvby7Hdr7RlJfvHdY
TLSH
T14BE5AF4BB6A001D4C1AAC17986E7951FEB7274940360A7EF12D2467E1F637F04EBB362
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1260900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\frede\Documents\FabFilter\Projects\Pro-Q\Windows\x64\Release VST\FabFilter Pro-Q 3.pdb

winmm

timeGetTime

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

opengl32

glGenTextures glDeleteTextures glBindTexture glGetString glMatrixMode glLoadIdentity glShadeModel glDisable glTexEnvi glEnable glBlendFunc glEnableClientState glTexCoordPointer glTexParameteri wglGetProcAddress glClear glDrawElements glDrawArrays glDisableClientState glScissor glColor4f glViewport glOrtho glVertexPointer glColorPointer wglDeleteContext wglMakeCurrent wglCreateContext glPixelStorei glTexImage2D glTexSubImage2D

kernel32

SetFilePointerEx ReadFile GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetFileType GetStdHandle HeapAlloc HeapFree EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FindClose FindFirstFileW FindNextFileW QueryPerformanceCounter QueryPerformanceFrequency FindResourceW VerSetConditionMask VerifyVersionInfoW CreateDirectoryW LoadResource LockResource SizeofResource GetFileAttributesW GetCurrentThreadId GetModuleHandleW GetModuleFileNameW Sleep MultiByteToWideChar WideCharToMultiByte IsDebuggerPresent CloseHandle SetEvent WaitForSingleObject ResetEvent LoadLibraryW GetProcAddress MulDiv CreateEventW SetThreadPriority GlobalLock GlobalUnlock LCMapStringW CompareStringW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ReadConsoleW CreateThread LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetLastError RaiseException RtlPcToFileHeader InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx TerminateProcess GetCurrentProcess GetCurrentProcessId IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetCPInfo GetStringTypeW GetSystemTimeAsFileTime DeleteFileW GetTimeZoneInformation HeapReAlloc RtlUnwind FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileSizeEx SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW HeapSize WriteConsoleW SetEndOfFile ExitThread LCMapStringEx InitializeCriticalSectionEx DecodePointer EncodePointer GetExitCodeThread WaitForSingleObjectEx

user32

SetCapture SetTimer GetKeyState CallWindowProcW SetFocus ShowWindow SendMessageW TrackPopupMenuEx DestroyMenu UpdateWindow InsertMenuItemW CreatePopupMenu SetRectEmpty SetCursor FillRect EnumDisplayMonitors ReleaseDC GetDC GetAncestor GetClassLongPtrW MonitorFromWindow LoadCursorW SetWindowPos GetWindowRect ReleaseCapture GetParent EnumThreadWindows wsprintfW IsWindowVisible MessageBoxW DefWindowProcW GetWindowLongPtrW PostMessageW UnregisterClassW DestroyWindow SetWindowLongPtrW CreateWindowExW RegisterClassW BeginPaint GetCursorPos EndPaint GetSystemMetrics GetDoubleClickTime EnableWindow IsWindowEnabled EndDialog DialogBoxParamW GetDlgItem GetWindowTextLengthW GetWindowTextW OpenClipboard GetClipboardData SetWindowTextW CloseClipboard PtInRect InvalidateRect SystemParametersInfoW MapWindowPoints KillTimer GetWindowPlacement SetWindowPlacement GetGUIThreadInfo GetWindowLongW EqualRect DrawTextW GetMonitorInfoW

gdi32

SwapBuffers SetPixelFormat ChoosePixelFormat SetTextColor SetBkColor CreateFontIndirectW CreateDIBSection DeleteDC BitBlt CreateCompatibleDC DeleteObject GetDeviceCaps GetStockObject SelectObject

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegSetValueExW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW

shell32

DragAcceptFiles DragFinish DragQueryPoint DragQueryFileW ShellExecuteW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW

ole32

OleUninitialize OleInitialize CoCreateGuid

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

424KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

62KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

767KB

Virtual Size

766KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FabFilter Pro-Q 3.dll

winmm

version

opengl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

generic