ProTools[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ProTools.exe
Size

15.3MB
MD5

f7c70e75cf7156b6719f1a18320c7f11
SHA1

4d63d9cb6914bea818dee03e3ac6fc023740492d
SHA256

46cd5de60397a6c63bde9690a2d28053fb45baa8432e250c0c942ab2ed9d4451
SHA512

9d8927fc6daa3ea0e9d47abd03341b6e995422ab07e424abdf87f3e508c38eb7cc660dae1f57e341866242733ab09013a3cbea318855d5c25ebb525891b96125
SSDEEP

196608:CdKcYb3xumUFZiYPbAmQuyYwifE+FkqtddGbuEHNWW5c1z9BE:TZumUFZiYPbAmQuyYwifE+mqtguEwZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProTools.exe

Files

ProTools.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

??0?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAA@AEBV0@@Z
??0?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAA@AEBV?$Cmn_TypedExceptionCode@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAVCmn_StackDump@@@Z
??0?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAA@AEBV0@@Z
??0?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAA@AEBV?$Cmn_TypedExceptionCode@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Cmn_AssertException@@QEAA@$$QEAV0@@Z
??0Cmn_AssertException@@QEAA@AEBV0@@Z
??0Cmn_AssertException@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Cmn_AudioOnlyExportNewPlaylistException@@QEAA@$$QEAV0@@Z
??0Cmn_AudioOnlyExportNewPlaylistException@@QEAA@AEBV0@@Z
??0Cmn_AudioOnlyExportNewPlaylistException@@QEAA@XZ
??0Cmn_CancelException@@QEAA@$$QEAV0@@Z
??0Cmn_CancelException@@QEAA@AEBV0@@Z
??0Cmn_CancelException@@QEAA@XZ
??0Cmn_DocumentTooNewException@@QEAA@$$QEAV0@@Z
??0Cmn_DocumentTooNewException@@QEAA@AEBV0@@Z
??0Cmn_DocumentTooNewException@@QEAA@XZ
??0Cmn_DocumentTooOldException@@QEAA@$$QEAV0@@Z
??0Cmn_DocumentTooOldException@@QEAA@AEBV0@@Z
??0Cmn_DocumentTooOldException@@QEAA@XZ
??0Cmn_DocumentWrongException@@QEAA@$$QEAV0@@Z
??0Cmn_DocumentWrongException@@QEAA@AEBV0@@Z
??0Cmn_DocumentWrongException@@QEAA@XZ
??0Cmn_ExportCompleteErrorException@@QEAA@$$QEAV0@@Z
??0Cmn_ExportCompleteErrorException@@QEAA@AEBV0@@Z
??0Cmn_ExportCompleteErrorException@@QEAA@XZ
??0Cmn_ExportProgressTimeoutException@@QEAA@$$QEAV0@@Z
??0Cmn_ExportProgressTimeoutException@@QEAA@AEBV0@@Z
??0Cmn_ExportProgressTimeoutException@@QEAA@XZ
??0Cmn_ExportToFileException@@QEAA@$$QEAV0@@Z
??0Cmn_ExportToFileException@@QEAA@AEBV0@@Z
??0Cmn_ExportToFileException@@QEAA@XZ
??0Cmn_FatalException@@QEAA@$$QEAV0@@Z
??0Cmn_FatalException@@QEAA@AEBV0@@Z
??0Cmn_FatalException@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Cmn_SyncHD_SampleRateLockedException@@QEAA@$$QEAV0@@Z
??0Cmn_SyncHD_SampleRateLockedException@@QEAA@AEBV0@@Z
??0Cmn_SyncHD_SampleRateLockedException@@QEAA@XZ
??0Cmn_SyncHD_TOF_Exception@@QEAA@$$QEAV0@@Z
??0Cmn_SyncHD_TOF_Exception@@QEAA@AEBV0@@Z
??0Cmn_SyncHD_TOF_Exception@@QEAA@XZ
??0RstE_PollRequestDelegate@@QEAA@AEBV0@@Z
??0RstE_PollRequestDelegate@@QEAA@XZ
??0RstE_Session@@QEAA@AEBV0@@Z
??1?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEAA@XZ
??1?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEAA@XZ
??1Cmn_AssertException@@UEAA@XZ
??1Cmn_AudioOnlyExportNewPlaylistException@@UEAA@XZ
??1Cmn_CancelException@@UEAA@XZ
??1Cmn_DocumentTooNewException@@UEAA@XZ
??1Cmn_DocumentTooOldException@@UEAA@XZ
??1Cmn_DocumentWrongException@@UEAA@XZ
??1Cmn_ExportCompleteErrorException@@UEAA@XZ
??1Cmn_ExportProgressTimeoutException@@UEAA@XZ
??1Cmn_ExportToFileException@@UEAA@XZ
??1Cmn_FatalException@@UEAA@XZ
??1Cmn_SyncHD_SampleRateLockedException@@UEAA@XZ
??1Cmn_SyncHD_TOF_Exception@@UEAA@XZ
??1RstE_PollRequestDelegate@@MEAA@XZ
??4Cmn_AssertException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_AssertException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_AudioOnlyExportNewPlaylistException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_AudioOnlyExportNewPlaylistException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_CancelException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_CancelException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_DocumentTooNewException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_DocumentTooNewException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_DocumentTooOldException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_DocumentTooOldException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_DocumentWrongException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_DocumentWrongException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_ExportCompleteErrorException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_ExportCompleteErrorException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_ExportProgressTimeoutException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_ExportProgressTimeoutException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_ExportToFileException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_ExportToFileException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_FatalException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_FatalException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_SyncHD_SampleRateLockedException@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_SyncHD_SampleRateLockedException@@QEAAAEAV0@AEBV0@@Z
??4Cmn_SyncHD_TOF_Exception@@QEAAAEAV0@$$QEAV0@@Z
??4Cmn_SyncHD_TOF_Exception@@QEAAAEAV0@AEBV0@@Z
??4RstE_PollRequestDelegate@@QEAAAEAV0@AEBV0@@Z
??_7?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@6B?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@@
??_7?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@6BCmn_ExceptionDescription@@@
??_7?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@6Bexception@std@@@
??_7?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@6B0@@
??_7?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@6BCmn_ExceptionDescription@@@
??_7Cmn_AssertException@@6B@
??_7Cmn_AudioOnlyExportNewPlaylistException@@6B@
??_7Cmn_CancelException@@6B@
??_7Cmn_DocumentTooNewException@@6B@
??_7Cmn_DocumentTooOldException@@6B@
??_7Cmn_DocumentWrongException@@6B@
??_7Cmn_ExportCompleteErrorException@@6B@
??_7Cmn_ExportProgressTimeoutException@@6B@
??_7Cmn_ExportToFileException@@6B@
??_7Cmn_FatalException@@6B@
??_7Cmn_SyncHD_SampleRateLockedException@@6B@
??_7Cmn_SyncHD_TOF_Exception@@6B@
??_7RstE_PollRequestDelegate@@6B@
??_7RstE_Session@@6BCmn_PolledObject@@@
??_7RstE_Session@@6BSys_ThreadSafeRefCountObject@@@
??_8?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@7B?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@@
??_8?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@7BCmn_Exception@@@
??_8?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@7B@
??_8RstE_Session@@7B@
??_D?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAAXXZ
??_D?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@QEAAXXZ
??_DRstE_Session@@IEAAXXZ
?Clone@?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEBAPEAVCmn_Exception@@XZ
?GetCode@?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEBAAEBVCmn_ExceptionCode@@XZ
?GetData@?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetDescription@?$Cmn_TypedExceptionDescription@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Throw@?$Cmn_TypedException@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@UEBAXXZ

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R2RLIC
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 7.4MB - Virtual size: 7.4MB

.rdata Size: 3.1MB - Virtual size: 3.1MB

.data Size: 208KB - Virtual size: 293KB

.pdata Size: 382KB - Virtual size: 381KB

.rsrc Size: 4.3MB - Virtual size: 4.3MB

.R2RLIC Size: 2KB - Virtual size: 4KB

.text
Size: 7.4MB - Virtual size: 7.4MB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 208KB - Virtual size: 293KB

.pdata
Size: 382KB - Virtual size: 381KB

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

.R2RLIC
Size: 2KB - Virtual size: 4KB