Behavioral task
behavioral1
Sample
VoicemodDesktop.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
VoicemodDesktop.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
VoicemodSDKDotNET.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
VoicemodSDKDotNET.dll
Resource
win10v2004-20230220-en
General
-
Target
Voicemod crack v.4.5.rar
-
Size
8.7MB
-
MD5
357eabdcc7ade6c5dd2d084fa44cfe7d
-
SHA1
82288359af2c6c51848dd1130c07853937854221
-
SHA256
aba0af85ccde26b9e70b5c2fc1a97836d3ad11c7bb19c265877434afd55729d1
-
SHA512
d090c4e95e84e4214512b5feb78c4eb31f0107e72d346a0d2fe045a987d55b6265c4c6d6c57dd3ab327da0954d2b1f4633138c03c5f12b2cb1cb077b8a5ec565
-
SSDEEP
196608:zlesZxC4jBTV2MKaNDF+n2NSzdq3zh27P/wbARjoLTLc:5esLCaf2Mprkh8MCioLTLc
Malware Config
Signatures
-
resource yara_rule static1/unpack001/VoicemodDesktop.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VoicemodDesktop.exe
Files
-
Voicemod crack v.4.5.rar.rar
Password: voicecrack
-
VoicemodDesktop.exe.exe windows x86
Password: voicecrack
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 323KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 18KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.voltbl Size: 512B - Virtual size: 52B
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 23KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vm_sec Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
VoicemodSDKDotNET.dll