LOVEND_x64 (1)[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
LOVEND_x64 (1).dll
Size 7.5MB
Sample261024-flwwbafy5v
SHA256 0b5090646337f51054f7256488f42b4ca8dd9af2b3b8fb160fa8e14b96164279
MD5 6eed774497c70dd4922065577d61e251
SHA1 80f77b183f75d36045fa8038546a4b4847adfbd7
SHA512 51c4d46a156431bdab3928ba382d5e5d90f6cf8a9926410da0a076f220587cfe3ce0483cd4febea0e54353f9e6c8aa7b5e6e481e16304d6b14f9784a7a30d61f
SSDEEP 98304:ynBQLW+HKhhSCG3VIpHI+QIzqUh4w5r+uh/RNDwktTn65G:y8IGKh9dz19auNjDwaTh
TLSH
T14576AD07E2A750ECC05AC178575BA522FA713C494324B9DF67D4AB352FA6BD02B7EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LOVEND_x64 (1).dll

File Explorer

LOVEND_x64 (1).dll

.dll 7.5MB

LOVEND_x64 (1).dll

IMPHASH 30a1954f473d69c1a1e0e966708313af
SHA256 0b5090646337f51054f7256488f42b4ca8dd9af2b3b8fb160fa8e14b96164279
MD5 6eed774497c70dd4922065577d61e251
SHA1 80f77b183f75d36045fa8038546a4b4847adfbd7
SHA512 51c4d46a156431bdab3928ba382d5e5d90f6cf8a9926410da0a076f220587cfe3ce0483cd4febea0e54353f9e6c8aa7b5e6e481e16304d6b14f9784a7a30d61f
SSDEEP 98304:ynBQLW+HKhhSCG3VIpHI+QIzqUh4w5r+uh/RNDwktTn65G:y8IGKh9dz19auNjDwaTh
TLSH
T14576AD07E2A750ECC05AC178575BA522FA713C494324B9DF67D4AB352FA6BD02B7EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4533448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Tunca\Documents\iPlug2-master\Examples\LOVEND\build-win\pdbs\LOVEND-vst2_x64.pdb

wininet

InternetGetConnectedState

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA

kernel32

CreateFileMappingA GetFileSize VerSetConditionMask GetCurrentProcessId FreeLibrary WideCharToMultiByte VerifyVersionInfoW MapViewOfFile GetTickCount GlobalUnlock SizeofResource EnumResourceNamesA FindResourceA LockResource LoadResource GetThreadTimes GlobalLock CreateFileW GetModuleFileNameW GetModuleHandleExW WriteConsoleW SetEndOfFile HeapSize FlushFileBuffers GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetConsoleCP WriteFile GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW ReadConsoleW GetConsoleMode SetFilePointerEx GetStdHandle HeapAlloc HeapFree HeapReAlloc GetProcAddress CreateThread CloseHandle GlobalAlloc LoadLibraryA GetCurrentThread CreateFileA Sleep MultiByteToWideChar UnmapViewOfFile GetSystemDirectoryW WaitForSingleObject SetThreadPriority DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection FindClose LoadLibraryExW RtlUnwind InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx SetStdHandle QueryPerformanceCounter QueryPerformanceFrequency EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentThreadId InitializeSListHead GetFileSizeEx ReadFile GetLastError FindNextFileW OutputDebugStringA CreateSemaphoreA ReleaseSemaphore ExitProcess LoadLibraryW InitOnceExecuteOnce GetFileType

user32

ToAscii ValidateRect BeginPaint VkKeyScanExA GetKeyboardLayout GetWindowThreadProcessId GetKeyState GetMessageExtraInfo GetUpdateRgn CloseTouchInputHandle GetTouchInputInfo GetWindowRect LoadCursorA DestroyWindow GetDC SetWindowPos PostMessageA CreateWindowExW ScreenToClient SendMessageW GetSystemMetrics CreatePopupMenu GetClassNameA TrackPopupMenu GetKeyboardState OpenClipboard RegisterWindowMessageA GetCapture SetTimer RegisterTouchWindow ClientToScreen CloseClipboard CallWindowProcA EmptyClipboard GetWindowLongA GetCursorPos TrackMouseEvent SetWindowTextA MessageBoxA RegisterClassA EnumWindows SystemParametersInfoW DefWindowProcA DestroyMenu CreateWindowExA SetFocus GetClipboardData SendMessageA SetCapture SetClipboardData SetCursor AppendMenuA PeekMessageA IsClipboardFormatAvailable GetWindowLongPtrA UnregisterClassA KillTimer GetParent SetWindowLongPtrA UpdateWindow ReleaseCapture ShowCursor InvalidateRect GetAncestor SetCursorPos ReleaseDC EndPaint

gdi32

AddFontMemResourceEx SelectObject CreateCompatibleDC StretchDIBits GetStockObject EnumFontFamiliesExA GetTextFaceA CreateRectRgn DeleteDC SetTextColor GetFontData GetRegionData SetBkMode SetDCBrushColor CreateFontIndirectA SetBkColor DeleteObject RemoveFontMemResourceEx GetRgnBox GetObjectA

comdlg32

ChooseColorA GetSaveFileNameW GetOpenFileNameW

shell32

DragQueryPoint SHGetPathFromIDListA DragAcceptFiles DragQueryFileA SHBrowseForFolderA ShellExecuteW

ole32

OleInitialize CoTaskMemFree OleUninitialize

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

532KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

111KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

LOVEND_x64 (1).dll

wininet

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

shell32

ole32

generic