SweetDrums_x64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
SweetDrums_x64.dll
Size 11.4MB
Sample261029-247lestwdv
SHA256 5507036eb0f6d77e1af4795ddf7b2b2d6200d2a846832981dcd5a9e141cb1a10
MD5 94548d0ffffe0e8b69e805efcc865ab1
SHA1 e0235f0c422668e3deeb3c9925e363b2f2f1b162
SHA512 ff12cb11d0004db935d10929b808462945181356ec79af6f0425b3293f4051df1281f172a0cd0ca2049703cae9ca15fa198f65d137be9ec9645823e286e36bf3
SSDEEP 196608:wQCD6+nUqkJE1ppaIn0+XoFNf49UQ2UcKzkKjziwk8m8RcCA:3vQpH0GUSBXx2gN
TLSH
T16AC6DF07E2A750ECC05AC1785747A522EA713C494324B9DB77DCAB352FA6BD02B7EB01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SweetDrums_x64.dll

File Explorer

SweetDrums_x64.dll

.dll 11.4MB

SweetDrums_x64.dll

IMPHASH 30a1954f473d69c1a1e0e966708313af
SHA256 5507036eb0f6d77e1af4795ddf7b2b2d6200d2a846832981dcd5a9e141cb1a10
MD5 94548d0ffffe0e8b69e805efcc865ab1
SHA1 e0235f0c422668e3deeb3c9925e363b2f2f1b162
SHA512 ff12cb11d0004db935d10929b808462945181356ec79af6f0425b3293f4051df1281f172a0cd0ca2049703cae9ca15fa198f65d137be9ec9645823e286e36bf3
SSDEEP 196608:wQCD6+nUqkJE1ppaIn0+XoFNf49UQ2UcKzkKjziwk8m8RcCA:3vQpH0GUSBXx2gN
TLSH
T16AC6DF07E2A750ECC05AC1785747A522EA713C494324B9DB77DCAB352FA6BD02B7EB01
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4526984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Tunca\Documents\iPlug2-master\Examples\SweetDrums\build-win\pdbs\SweetDrums-vst2_x64.pdb

wininet

InternetGetConnectedState

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA

kernel32

CreateFileMappingA GetFileSize VerSetConditionMask GetCurrentProcessId FreeLibrary WideCharToMultiByte VerifyVersionInfoW MapViewOfFile GetTickCount GlobalUnlock SizeofResource EnumResourceNamesA FindResourceA LockResource LoadResource GetThreadTimes GlobalLock CreateFileW GetModuleFileNameW GetModuleHandleExW WriteConsoleW SetEndOfFile HeapSize FlushFileBuffers GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetConsoleCP WriteFile GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW ReadConsoleW GetConsoleMode SetFilePointerEx GetStdHandle HeapAlloc HeapFree HeapReAlloc GetProcAddress CreateThread CloseHandle GlobalAlloc LoadLibraryA GetCurrentThread CreateFileA Sleep MultiByteToWideChar UnmapViewOfFile GetSystemDirectoryW WaitForSingleObject SetThreadPriority DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection FindClose LoadLibraryExW RtlUnwind InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx SetStdHandle QueryPerformanceCounter QueryPerformanceFrequency EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentThreadId InitializeSListHead GetFileSizeEx ReadFile GetLastError FindNextFileW OutputDebugStringA CreateSemaphoreA ReleaseSemaphore ExitProcess LoadLibraryW InitOnceExecuteOnce GetFileType

user32

ToAscii ValidateRect BeginPaint VkKeyScanExA GetKeyboardLayout GetWindowThreadProcessId GetKeyState GetMessageExtraInfo GetUpdateRgn CloseTouchInputHandle GetTouchInputInfo GetWindowRect LoadCursorA DestroyWindow GetDC SetWindowPos PostMessageA CreateWindowExW ScreenToClient SendMessageW GetSystemMetrics CreatePopupMenu GetClassNameA TrackPopupMenu GetKeyboardState OpenClipboard RegisterWindowMessageA GetCapture SetTimer RegisterTouchWindow ClientToScreen CloseClipboard CallWindowProcA EmptyClipboard GetWindowLongA GetCursorPos TrackMouseEvent SetWindowTextA MessageBoxA RegisterClassA EnumWindows SystemParametersInfoW DefWindowProcA DestroyMenu CreateWindowExA SetFocus GetClipboardData SendMessageA SetCapture SetClipboardData SetCursor AppendMenuA PeekMessageA IsClipboardFormatAvailable GetWindowLongPtrA UnregisterClassA KillTimer GetParent SetWindowLongPtrA UpdateWindow ReleaseCapture ShowCursor InvalidateRect GetAncestor SetCursorPos ReleaseDC EndPaint

gdi32

AddFontMemResourceEx SelectObject CreateCompatibleDC StretchDIBits GetStockObject EnumFontFamiliesExA GetTextFaceA CreateRectRgn DeleteDC SetTextColor GetFontData GetRegionData SetBkMode SetDCBrushColor CreateFontIndirectA SetBkColor DeleteObject RemoveFontMemResourceEx GetRgnBox GetObjectA

comdlg32

ChooseColorA GetSaveFileNameW GetOpenFileNameW

shell32

DragQueryPoint SHGetPathFromIDListA DragAcceptFiles DragQueryFileA SHBrowseForFolderA ShellExecuteW

ole32

OleInitialize CoTaskMemFree OleUninitialize

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

533KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

57KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

111KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6.2MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SweetDrums_x64.dll

wininet

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

shell32

ole32

generic