?TravelCheck@@YGK:O
Static task
static1
Behavioral task
behavioral1
Sample
adobe audition 2.0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
adobe audition 2.0.exe
Resource
win10v2004-20231215-en
General
-
Target
0f915442f42376de37c83fed72afa2cd
-
Size
123KB
-
MD5
0f915442f42376de37c83fed72afa2cd
-
SHA1
a51bcf83cf075c30eb242d93df04f660524f3dd3
-
SHA256
2407c795df8f9479cf301793db9d7ee6e5b7db43da9123f0515ef6d52147ef4c
-
SHA512
552e534af6ccd9a0289e6e0810a33a8f3fb688e0b6633ad119fa8e5feab8b2623a0ea545b0b5ab859fd0a3e45203358219c1fcc239cdb1f3f4f13267cf8ba70c
-
SSDEEP
3072:XmzyPXa6HanMFhS4jyIinJtJCEiEd6Y7f/VHwLwzr:WzAbnFh7jVI5iEd68/VHwLwzr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ adobe audition 2.0.exe
Files
-
0f915442f42376de37c83fed72afa2cd.zip
-
adobe audition 2.0.exe.exe windows:5 windows x86 arch:x86
07bdd850dd18fdf26c29ac9c4b72f1ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
fclose
_amsg_exit
_initterm
_ismbblead
rand
_XcptFilter
_exit
_cexit
__setusermatherr
memset
__getmainargs
isspace
shlwapi
UrlGetLocationA
UrlIsOpaqueW
user32
SetWindowTextA
CascadeWindows
GetIconInfo
ScrollWindow
ToUnicodeEx
CreateAcceleratorTableW
SendMessageW
GetClassNameW
CreateIconIndirect
SendMessageTimeoutW
IsCharAlphaA
wsprintfW
EnumChildWindows
GetNextDlgTabItem
GetDC
DefDlgProcW
DestroyMenu
kernel32
MoveFileW
GetCommState
GetModuleHandleA
lstrcmpiW
DefineDosDeviceW
SetCommBreak
GetModuleFileNameA
FindResourceA
GetComputerNameA
lstrlenA
GlobalMemoryStatus
LoadResource
Exports
Exports
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ