FL_Studio_Producer_Edition_v20[.]9[.]2[.]2963[.]7z | Triage

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target

FL_Studio_Producer_Edition_v20.9.2.2963.7z
Size

898.4MB
MD5

edb7c07d105155bc00a2d10557047b1a
SHA1

233151122a5da32cb06acc40a7bd8fb0ba58e3cb
SHA256

66542fb39d95db15b758629e815ccf163ae2d9e0ec489d193262c106574a9f55
SHA512

7c0331bd27303fdb426c5f47e193adad36c9e7596217cbcc8dbbc457a69b2b303ce9f3ba922cec3a4fefed220cd8c77aa4ba1ffc169c4c91277b3c50376d1f75
SSDEEP

25165824:3NHycrYNNTZhZX2ywMSLk3yuhVEQ+KoEIiaju6:3NS0kNTBGyyPuhVEQboEIi+

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/FL.Studio.Producer.Edition.20.9.2.2963.Port.exe	pdf_with_link_action

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FL.Studio.Producer.Edition.20.9.2.2963.Port.exe

NSIS installer 1 IoCs

resource	yara_rule
static1/unpack001/FL.Studio.Producer.Edition.20.9.2.2963.Port.exe	nsis_installer_2

Files

FL_Studio_Producer_Edition_v20.9.2.2963.7z
.7z
FL.Studio.Producer.Edition.20.9.2.2963.Port.exe
.exe windows x64

92f694988deed85a7cb067c901f32a93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetVersionExW
GetSystemInfo
VirtualQuery
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
ExitProcess
GetModuleHandleA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 304KB

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Readme.txt