Focusrite Control - 3[.]11[.]0[.]1983[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Focusrite Control - 3.11.0.1983.exe
Size

49.7MB
MD5

65b00d6855811cf5cf52ca1787c11f2b
SHA1

4be039ae62980386ee96e28c0153423305c896cb
SHA256

d03ad54d46fee872acd1aa02a3325db90f582aa41cf8bac3a9b0ae757de1a134
SHA512

ed088ae5b1a006edb790c2d312e36c4174fd5508159e9b6bc9d53ebab8e62d1105a817a573853fcf6aab66e22605662ed683e14b523f3211c248a09b2c622048
SSDEEP

1572864:lkF6SrG06lPBOyfIz0BUbovyIDweau/9LPz9CmKj:lGi06lJOyHUMFDVaOlPzU7j

Score

1^/10

Malware Config

Signatures

Files

Focusrite Control - 3.11.0.1983.exe
.exe windows x86

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:27:40:74:49:29:4b:38:f7:8a:48:ce:ae:5d:c5:1e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/10/2021, 00:00

Not After

01/10/2024, 23:59

Subject

SERIALNUMBER=02357989,CN=Focusrite Audio Engineering Ltd,OU=Focusrite Audio Engineering Ltd,O=Focusrite Audio Engineering Ltd,L=High Wycombe,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b9:db:f5:17:c6:de:54:f5:e6:b7:a0:29:a1:2e:df:bc:57:03:d7:48:be:8c:c7:32:11:35:da:d4:f7:f9:4d:75
Signer

Actual PE Digest

b9:db:f5:17:c6:de:54:f5:e6:b7:a0:29:a1:2e:df:bc:57:03:d7:48:be:8c:c7:32:11:35:da:d4:f7:f9:4d:75

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=02357989,CN=Focusrite Audio Engineering Ltd,OU=Focusrite Audio Engineering Ltd,O=Focusrite Audio Engineering Ltd,L=High Wycombe,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

26/05/2022, 11:13
Valid: true

Chain 1

SERIALNUMBER=02357989,CN=Focusrite Audio Engineering Ltd,OU=Focusrite Audio Engineering Ltd,O=Focusrite Audio Engineering Ltd,L=High Wycombe,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

0f:27:40:74:49:29:4b:38:f7:8a:48:ce:ae:5d:c5:1eCertificate

Extended Key Usages

Key Usages

b9:db:f5:17:c6:de:54:f5:e6:b7:a0:29:a1:2e:df:bc:57:03:d7:48:be:8c:c7:32:11:35:da:d4:f7:f9:4d:75Signer

Signature Validations

Verification

26/05/2022, 11:13 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 41KB - Virtual size: 40KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

0f:27:40:74:49:29:4b:38:f7:8a:48:ce:ae:5d:c5:1e
Certificate

b9:db:f5:17:c6:de:54:f5:e6:b7:a0:29:a1:2e:df:bc:57:03:d7:48:be:8c:c7:32:11:35:da:d4:f7:f9:4d:75
Signer

26/05/2022, 11:13
Valid: true

CODE
Size: 41KB - Virtual size: 40KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB