D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
Static task
static1
Errors
General
-
Target
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual.zip
-
Size
816.9MB
-
MD5
f0d23f466399dba8c634d7c289de93fb
-
SHA1
c12fadfee929b812d24c81cd6f7d062d7768840a
-
SHA256
c9f0dd438e940d223a5e551e9cc67facf4d69a343ecf96dc6cdded7bf9e06892
-
SHA512
d6a99ed25ebebf1d21a971afdaafb32accf12b78979016fe4d6e09b91d30da9a14481586d9a9103d4994da5cb1b04178d71cea48a40c5d4a273bb57ef0a4ddf4
-
SSDEEP
25165824:bsEyhQIfSkgUojN4BlZ8m0fyk1MGNZegSLO3Bi:nNIfMUA698mcy3EF13w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual/Activation/SibeliusTC_Medicine.exe
Files
-
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual.zip.zip
-
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual/Activation/SibeliusTC_Medicine.exe.exe windows:5 windows x86 arch:x86
12e12319f1029ec4f8fcbed7e82df162
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
oleaut32
SysAllocString
SysFreeString
VariantClear
gdiplus
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual/Install_Sibelius.exe.exe windows:5 windows x86 arch:x86
a201a3d6fa5f43a92c0c343738837cf1
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11/05/2022, 00:00Not After10/08/2033, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
0f:af:37:96:47:ba:d2:02:65:81:a1:b5:fb:d5:b1:31Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before06/06/2022, 00:00Not After25/06/2025, 23:59SubjectCN=Avid Technology\, Inc,OU=Engineering,O=Avid Technology\, Inc,L=Burlington,ST=Massachusetts,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
38:7a:9e:08:17:be:34:20:c4:b8:7d:fc:9d:f6:b0:31:ce:ec:60:1dSigner
Actual PE Digest38:7a:9e:08:17:be:34:20:c4:b8:7d:fc:9d:f6:b0:31:ce:ec:60:1dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\CodeBases\isdev\redist\Language Independent\i386\setupPreReq.pdb
Imports
comctl32
ord17
kernel32
GetVersion
GetLocalTime
GetFileAttributesW
GetCurrentDirectoryW
FileTimeToLocalFileTime
GetFileTime
GetSystemDefaultUILanguage
GlobalAlloc
GlobalFree
FlushFileBuffers
VirtualQuery
IsBadReadPtr
GetDiskFreeSpaceExW
GetDriveTypeW
GetCurrentProcess
GetCurrentThread
InterlockedExchange
LoadLibraryExA
GetModuleHandleW
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
LoadLibraryExW
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
HeapAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
MulDiv
GetSystemInfo
MoveFileW
GetPrivateProfileStringW
GetSystemTimeAsFileTime
SetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
CompareFileTime
SetCurrentDirectoryW
VerLanguageNameW
GetUserDefaultLangID
GetSystemDefaultLangID
FreeResource
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
FindResourceExW
SetFileTime
OpenProcess
GetProcessTimes
ReadConsoleW
WriteConsoleW
SetStdHandle
SetFilePointerEx
lstrcmpiW
lstrcmpW
IsValidLocale
GetLocaleInfoW
lstrcpyA
ExitThread
GetExitCodeProcess
WaitForSingleObject
GetCommandLineW
LoadLibraryW
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
CreateEventW
QueryPerformanceFrequency
GetTempFileNameW
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
MapViewOfFile
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
lstrcpyW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
FormatMessageW
LocalFree
GetWindowsDirectoryW
GetSystemDirectoryW
CreateProcessW
InterlockedDecrement
InterlockedIncrement
Sleep
RemoveDirectoryW
DeleteFileW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
GetConsoleMode
GetConsoleCP
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
HeapReAlloc
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
HeapSize
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
LCMapStringW
DecodePointer
EncodePointer
user32
SetWindowPos
SetWindowTextW
GetMessageW
TranslateMessage
DispatchMessageW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
PostMessageW
DefWindowProcW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW
RegisterClassW
FillRect
CharPrevW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
GetParent
GetWindowTextW
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
FindWindowW
SubtractRect
IntersectRect
SetRect
GetWindowDC
GetSysColorBrush
GetSysColor
GetDC
GetSystemMetrics
GetDlgCtrlID
ExitWindowsEx
CharUpperW
wsprintfA
CallWindowProcW
DrawIcon
DrawTextW
UpdateWindow
InvalidateRect
SetPropW
GetPropW
RemovePropW
MapWindowPoints
DrawFocusRect
CopyRect
InflateRect
EnumChildWindows
GetClassNameW
MapDialogRect
RegisterClassExW
MonitorFromPoint
CreateDialogIndirectParamW
CharNextW
IsDialogMessageW
FindWindowExW
ScreenToClient
MessageBoxW
GetWindowRect
EnableWindow
SendDlgItemMessageW
DestroyWindow
IsWindow
SendMessageW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
PostQuitMessage
gdi32
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
GetObjectW
TranslateCharsetInfo
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject
CreateCompatibleBitmap
CreateDCW
CreatePatternBrush
GetTextExtentPoint32W
RestoreDC
SaveDC
DeleteMetaFile
CreateBitmap
CreateRectRgn
PatBlt
PlayMetaFile
SelectClipRgn
SetBkColor
SetMapMode
SetMetaFileBitsEx
SetPixel
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
UnrealizeObject
advapi32
CreateWellKnownSid
RegOpenKeyExW
RegOpenKeyW
RegOverridePredefKey
LookupPrivilegeValueW
AdjustTokenPrivileges
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
shell32
CommandLineToArgvW
ShellExecuteExW
SHBrowseForFolderW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ole32
CoCreateInstance
CoCreateGuid
CreateStreamOnHGlobal
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoInitializeSecurity
CoInitialize
oleaut32
VariantClear
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
VarBstrCmp
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
SysReAllocStringLen
shlwapi
PathFileExistsW
rpcrt4
RpcStringFreeW
UuidCreate
UuidToStringW
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromResource
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
Sections
.text Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 521KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual/Readme.txt