winmm64[.]dll | Triage™

General

Target
winmm64.dll
Size 16KB
Sample260825-axbfvsdn8w
SHA256 bfb385ed30eead316bf65187ab5105392efc4e894b4d6a79adea74db39a73523
MD5 6ff8529a8d5e1564dee532dc0d43faa4
SHA1 c7e53d6e67e8b6aa718e76a0d4e5ae68717323ff
SHA512 530e87fd40948d1a2c0bd8a5dcdbb7c21412d9d65e1633fa4e69c397c5c55951b53980f9e343a69b0808e5b4b9ee40b18e849b88db66a9069c5924200044338e
SSDEEP 384:lif7k8eShWB2+H1jg5lS0XyACPdpZUN8U7ZSdCbraYP:lif3ekWY+HZIyvFp2SU7ZSdCb
TLSH
T113728DA40A94D59FC644E13B0C93842CDBB6A3D7E2626B13E7613F86C741B8A648DD53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
winmm64.dll
unpack001/out.upx

File Explorer

winmm64.dll

.dll 16KB
out.upx

.dll 27KB

winmm64.dll

SHA256 bfb385ed30eead316bf65187ab5105392efc4e894b4d6a79adea74db39a73523
MD5 6ff8529a8d5e1564dee532dc0d43faa4
SHA1 c7e53d6e67e8b6aa718e76a0d4e5ae68717323ff
SHA512 530e87fd40948d1a2c0bd8a5dcdbb7c21412d9d65e1633fa4e69c397c5c55951b53980f9e343a69b0808e5b4b9ee40b18e849b88db66a9069c5924200044338e
SSDEEP 384:lif7k8eShWB2+H1jg5lS0XyACPdpZUN8U7ZSdCbraYP:lif3ekWY+HZIyvFp2SU7ZSdCb
TLSH
T113728DA40A94D59FC644E13B0C93842CDBB6A3D7E2626B13E7613F86C741B8A648DD53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

CloseDriver DefDriverProc DriverCallback DrvGetModuleHandle Function_2 GetDriverModuleHandle OpenDriver PlaySound PlaySoundA PlaySoundW SendDriverMessage WOWAppExit auxGetDevCapsA auxGetDevCapsW auxGetNumDevs auxGetVolume auxOutMessage auxSetVolume joyConfigChanged joyGetDevCapsA joyGetDevCapsW joyGetNumDevs joyGetPos joyGetPosEx joyGetThreshold joyReleaseCapture joySetCapture joySetThreshold mciDriverNotify mciDriverYield mciExecute mciFreeCommandResource mciGetCreatorTask mciGetDeviceIDA mciGetDeviceIDFromElementIDA mciGetDeviceIDFromElementIDW mciGetDeviceIDW mciGetDriverData mciGetErrorStringA mciGetErrorStringW mciGetYieldProc mciLoadCommandResource mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mciSetDriverData mciSetYieldProc midiConnect midiDisconnect midiInAddBuffer midiInClose midiInGetDevCapsA midiInGetDevCapsW midiInGetErrorTextA midiInGetErrorTextW midiInGetID midiInGetNumDevs midiInMessage midiInOpen midiInPrepareHeader midiInReset midiInStart midiInStop midiInUnprepareHeader midiOutCacheDrumPatches midiOutCachePatches midiOutClose midiOutGetDevCapsA midiOutGetDevCapsW midiOutGetErrorTextA midiOutGetErrorTextW midiOutGetID midiOutGetNumDevs midiOutGetVolume midiOutLongMsg midiOutMessage midiOutOpen midiOutPrepareHeader midiOutReset midiOutSetVolume midiOutShortMsg midiOutUnprepareHeader midiStreamClose midiStreamOpen midiStreamOut midiStreamPause midiStreamPosition midiStreamProperty midiStreamRestart midiStreamStop mixerClose mixerGetControlDetailsA mixerGetControlDetailsW mixerGetDevCapsA mixerGetDevCapsW mixerGetID mixerGetLineControlsA mixerGetLineControlsW mixerGetLineInfoA mixerGetLineInfoW mixerGetNumDevs mixerMessage mixerOpen mixerSetControlDetails mmDrvInstall mmGetCurrentTask mmTaskBlock mmTaskCreate mmTaskSignal mmTaskYield mmioAdvance mmioAscend mmioClose mmioCreateChunk mmioDescend mmioFlush mmioGetInfo mmioInstallIOProcA mmioInstallIOProcW mmioOpenA mmioOpenW mmioRead mmioRenameA mmioRenameW mmioSeek mmioSendMessage mmioSetBuffer mmioSetInfo mmioStringToFOURCCA mmioStringToFOURCCW mmioWrite mmsystemGetVersion sndPlaySoundA sndPlaySoundW timeBeginPeriod timeEndPeriod timeGetDevCaps timeGetSystemTime timeGetTime timeKillEvent timeSetEvent waveInAddBuffer waveInClose waveInGetDevCapsA waveInGetDevCapsW waveInGetErrorTextA waveInGetErrorTextW waveInGetID waveInGetNumDevs waveInGetPosition waveInMessage waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutBreakLoop waveOutClose waveOutGetDevCapsA waveOutGetDevCapsW waveOutGetErrorTextA waveOutGetErrorTextW waveOutGetID waveOutGetNumDevs waveOutGetPitch waveOutGetPlaybackRate waveOutGetPosition waveOutGetVolume waveOutMessage waveOutOpen waveOutPause waveOutPrepareHeader waveOutReset waveOutRestart waveOutSetPitch waveOutSetPlaybackRate waveOutSetVolume waveOutUnprepareHeader waveOutWrite

out.upx

SHA256 5be1be63980e8482ba31a98866caabff13ad271b245729afe80d23e7991fd60e
MD5 5099d5b8955a42b0bdb0e3056660acb0
SHA1 2b8e29236a835575257a866dbc68e3c1bf17dc68
SHA512 f58c118fb401e94604d6f349618f18a644cb896e20346153615792d1e1d1f4dc971c39dba918e0bf73934047c4587ed5aba4e21ccc9f12ac3c9c8562d046749d
SSDEEP 192:U5fmgfB/4DryTbEW2XKXN+0SHKfNYY7XN+Cj3/9tF3Xq4NiU8pU8Ert/AH6gy6oz:U5fmgZgDe0gPnitU8cgLJ/sP5BFt
TLSH
T127C2FB19B2DF4BAFF146143BC8114C8B91B172685F61DADB1F514A380EA1AD0B73D68E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

winmm64.dll

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

winmm64.dll

generic

out.upx

generic