soundpad-3[.]4[.]10[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

soundpad-3.4.10.zip
Size

14.9MB
MD5

33172c8ee56dd0fdfb8a3e15ffebf45d
SHA1

722aa30e5bca9eed3b36e305b1bc0051904dc3ba
SHA256

3c15edff17cf08762fa3a93bbdf14a8c5c663df2cca68cbd27d0fb4fa231b594
SHA512

0848eb8450a87d7d5c63d201f4d6c9f66c285f9bb6bb9c5ea8b036e475d81aa5ac98640498287511d19464edcc80730f7f8fdccaa8e74a29d0102e2e3136362d
SSDEEP

393216:1kogYSmZWRRZOVTWgpubc5jDBaSRr92oOzVofc:uogR5RRZopubMjNaSRr92okefc

Score

1^/10

Malware Config

Signatures

Files

soundpad-3.4.10.zip
.zip

Password: 12345
Soundpad3.4.10.zip
.zip

Password: 12345
Soundpad3.4.10/crack/Soundpad.exe
.exe windows:6 windows x64 arch:x64

Password: 12345

29067d24f8aa3e343496cb2023a7d138

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-10-2019 00:00

Not After

10-10-2022 23:59

Subject

CN=Arthur Lepp,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68
Signer

Actual PE Digest

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\UniteFx\x64\Release\Soundpad.pdb

Imports

usp10

ScriptItemize
ScriptBreak

dwmapi

DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled

kernel32

GetDiskFreeSpaceExW
GetFileInformationByHandle
GetVolumeInformationW
FileTimeToSystemTime
HeapAlloc
GetProcessHeap
FindFirstFileW
CreateEventExW
FindNextFileW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
GetSystemDirectoryW
FormatMessageW
GetFileAttributesExW
GetWindowsDirectoryW
VerSetConditionMask
GetModuleHandleW
CreateFileMappingW
MapViewOfFile
OutputDebugStringW
GetLocalTime
HeapSetInformation
MultiByteToWideChar
HeapFree
VerifyVersionInfoW
SetErrorMode
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetCurrentDirectoryW
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
LoadResource
LockResource
SizeofResource
FindResourceW
IsValidCodePage
GetCPInfo
FreeLibrary
RtlCaptureContext
GetCurrentThread
GetCommandLineW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
PeekNamedPipe
CreateThread
IsBadReadPtr
IsBadStringPtrA
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapSize
GlobalSize
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
GetStringTypeW
GetLocaleInfoEx
RtlPcToFileHeader
EncodePointer
LCMapStringEx
CompareStringEx
InitializeCriticalSectionAndSpinCount
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlUnwind
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
EnumSystemLocalesW
GetCurrentDirectoryW
GetFileSizeEx
HeapReAlloc
SetEndOfFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLogicalDriveStringsW
FindFirstFileExW
GetCommandLineA
lstrcmpA
LocalFree
LocalAlloc
DisconnectNamedPipe
FlushFileBuffers
WriteFile
SetLastError
WideCharToMultiByte
CancelIo
ReadFile
ConnectNamedPipe
CreateNamedPipeW
CreateEventW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetTempPathW
GetProcAddress
LoadLibraryW
CopyFileW
GetCurrentProcess
MoveFileExW
ReplaceFileW
DecodePointer
DeleteCriticalSection
RaiseException
GetTickCount64
Sleep
CreateDirectoryW
GetModuleFileNameW
UnmapViewOfFile
WaitForSingleObject
CloseHandle
GetExitCodeProcess
WaitForMultipleObjects
GetLastError
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteFileW
InitializeCriticalSectionEx
SetEnvironmentVariableW

user32

CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterWindowMessageW
SetMenu
FindWindowExW
EndDialog
EnumChildWindows
ChildWindowFromPoint
GetComboBoxInfo
UnionRect
GetClassInfoW
IsRectEmpty
IsMenu
GetWindowTextLengthW
HideCaret
ShowCaret
GetDesktopWindow
RegisterClipboardFormatW
GetClipboardFormatNameW
GetProcessDefaultLayout
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
ValidateRgn
NotifyWinEvent
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
EnumDisplayMonitors
LoadImageW
IsClipboardFormatAvailable
wsprintfW
AdjustWindowRectEx
ShowCursor
PostQuitMessage
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
TranslateMessage
GetParent
DestroyCursor
GetWindowLongPtrW
FillRect
DrawFocusRect
GetSysColor
GetWindowRect
DrawTextW
GetSystemMetrics
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
LoadCursorW
SetCursor
KillTimer
SetTimer
MsgWaitForMultipleObjects
DispatchMessageW
DestroyWindow
DefWindowProcW
PeekMessageW
BringWindowToTop
CreateWindowExW
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
LoadIconW
LoadBitmapW
OffsetRect
LoadCursorFromFileW
CopyRect
SetRectEmpty
DrawStateW
SetWindowRgn
EnableMenuItem
GetSystemMenu
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
IsIconic
FlashWindowEx
SetLayeredWindowAttributes
GetWindowPlacement
GetIconInfo
CreateIconIndirect
GetDlgItem
CreateDialogParamW
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
PtInRect
GetMenuState
DrawIconEx
DrawFrameControl
SetWindowLongPtrW
InflateRect
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
ReleaseDC
GetDC
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetKeyState
GetActiveWindow
SetFocus
IsWindowVisible
GetClassLongPtrW
SetClassLongPtrW
SendMessageW
UnregisterClassW
GetWindowLongW
SetWindowPos
DestroyIcon
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
ShowWindow
IsWindow
CallWindowProcW
GetFocus
GetMonitorInfoW
MonitorFromWindow
SetWindowLongW
keybd_event
SetForegroundWindow
ExitWindowsEx
GetDoubleClickTime
GetAsyncKeyState
GetKeyNameTextW
MapVirtualKeyW

advapi32

AllocateAndInitializeSid
RegDeleteKeyExW
RegEnumKeyW
RegDeleteKeyW
RegSetKeySecurity
RegEnumKeyExW
RegCreateKeyExW
SetSecurityDescriptorOwner
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseEventLog
ReadEventLogW
OpenEventLogW
NotifyServiceStatusChangeW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
GetSecurityDescriptorDacl
CryptReleaseContext
CryptGetHashParam
CryptImportKey
CryptDestroyHash
CryptHashData
CryptDeriveKey
CryptCreateHash
CryptVerifySignatureW
CryptDecrypt
CryptAcquireContextW
CryptDestroyKey
RegCloseKey
GetTokenInformation
QueryServiceStatusEx
StartServiceW
EnumDependentServicesW
ControlService
GetUserNameW
RegSetValueExW
FreeSid
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegDeleteTreeW

shell32

DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
SHGetMalloc
SHGetPathFromIDListW
CommandLineToArgvW
SHGetFolderPathW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFileInfoW
ExtractIconExW
SHGetStockIconInfo
SHCreateItemFromParsingName
SHCreateDirectoryExW
ord155
ord6
SHOpenFolderAndSelectItems
ord190
ShellExecuteExW
SHChangeNotify

ole32

CoTaskMemFree
RegisterDragDrop
StringFromGUID2
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
CoLockObjectExternal
ReleaseStgMedium
RevokeDragDrop
OleUninitialize
OleInitialize
PropVariantClear
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
DoDragDrop
CoCreateInstance
CLSIDFromString
CoTaskMemAlloc

wsock32

WSACleanup
WSAStartup

comctl32

ImageList_SetDragCursorImage
ImageList_DragMove
ord16
ord17
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ImageList_Remove
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Copy
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave

rpcrt4

RpcStringFreeW
UuidToStringW

oleacc

CreateStdAccessibleObject

uxtheme

GetThemeMargins
DrawThemeParentBackground
GetThemeFont
IsAppThemed
IsThemeActive
IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeInt
GetThemeBackgroundExtent
GetThemeSysFont
GetThemeColor
GetThemeSysColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeBackgroundContentRect
IsThemeBackgroundPartiallyTransparent
GetThemePartSize

shlwapi

ord219
SHAutoComplete
AssocQueryStringW
ord12

crypt32

CryptMsgClose
CryptMsgGetParam
CertFreeCertificateContext
CertCloseStore
CryptQueryObject
CertFindCertificateInStore
CryptDecodeObject

wininet

InternetQueryDataAvailable
InternetReadFile
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
HttpOpenRequestW

mf

MFCreateTranscodeTopology
MFCreateTranscodeProfile
MFCreateMediaSession
MFGetService

mfplat

MFCreateMediaType
MFCreateSourceResolver
MFCreateSample
MFCreateMemoryBuffer
MFCreateAttributes
MFCreateMFByteStreamOnStream
MFShutdown
MFStartup

mfreadwrite

MFCreateSourceReaderFromByteStream
MFCreateSourceReaderFromURL

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

msimg32

GradientFill
AlphaBlend

gdi32

SetPolyFillMode
SetPixel
GetLayout
SetBkMode
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetStockObject
GetObjectType
GetClipBox
GetBkColor
Ellipse
Arc
GetPixel
ExtFloodFill
CreateSolidBrush
CreatePen
OffsetRgn
GetRegionData
ExtCreateRegion
GetObjectW
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
GetOutlineTextMetricsW
GetDeviceCaps
DeleteObject
EnumFontFamiliesExW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
GetSystemPaletteEntries
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
CreateRectRgnIndirect
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SelectObject
RealizePalette
ExcludeClipRect
CreateRectRgn
SetTextColor
SetBkColor
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
MoveToEx
LineTo
GetTextExtentPoint32W
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
PageSetupDlgW
ChooseColorW

oleaut32

SafeArrayUnlock
SafeArrayLock
VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetVartype
VarBstrFromCy

Exports

Exports

??0ServiceControl@@QEAA@XZ
??0UniteFxControl@@QEAA@$$QEAV0@@Z
??0UniteFxControl@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
??4UniteFxControl@@QEAAAEAV0@$$QEAV0@@Z
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?Stop@UniteFxControl@@QEAAJXZ

Sections

.text
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 158KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Soundpad3.4.10/setup/Soundpad_x64-3.4.10.exe
.exe windows:5 windows x86 arch:x86

Password: 12345

20dd26497880c05caed9305b3c8b9109

Code Sign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:1f:b2:de:b3:bb:ae:8c:8d:50:12:dc:3b:d1:ee:49
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19-05-2020 00:00

Not After

19-05-2023 23:59

Subject

CN=Voskhod\, OOO,O=Voskhod\, OOO,POSTALCODE=630020,STREET=d. 54 korp. 10 pom. 1A\, ul. Igarskaya,L=Novosibirsk,ST=Novosibirsk region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b2:19:83:12:42:83:78:25:98:3d:84:c3:5c:eb:55:da:96:ba:e0:1d
Signer

Actual PE Digest

b2:19:83:12:42:83:78:25:98:3d:84:c3:5c:eb:55:da:96:ba:e0:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Пароль к архиву.txt

Sharing

General

Malware Config

Signatures

Files

Password: 12345

Password: 12345

Password: 12345

29067d24f8aa3e343496cb2023a7d138

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

usp10

dwmapi

kernel32

user32

advapi32

shell32

ole32

wsock32

comctl32

rpcrt4

oleacc

uxtheme

shlwapi

crypt32

wininet

mf

mfplat

mfreadwrite

avrt

msimg32

gdi32

winspool.drv

comdlg32

oleaut32

Exports

Exports

Sections

.text Size: 8.1MB - Virtual size: 8.1MB

.rdata Size: 2.4MB - Virtual size: 2.4MB

.data Size: 158KB - Virtual size: 1.0MB

.pdata Size: 243KB - Virtual size: 242KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 129KB - Virtual size: 128KB

Password: 12345

20dd26497880c05caed9305b3c8b9109

Code Sign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

75:1f:b2:de:b3:bb:ae:8c:8d:50:12:dc:3b:d1:ee:49Certificate

Extended Key Usages

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68
Signer

.text
Size: 8.1MB - Virtual size: 8.1MB

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.data
Size: 158KB - Virtual size: 1.0MB

.pdata
Size: 243KB - Virtual size: 242KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 129KB - Virtual size: 128KB

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

01
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

75:1f:b2:de:b3:bb:ae:8c:8d:50:12:dc:3b:d1:ee:49
Certificate

b2:19:83:12:42:83:78:25:98:3d:84:c3:5c:eb:55:da:96:ba:e0:1d
Signer

.text
Size: 61KB - Virtual size: 60KB

.itext
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.rsrc
Size: 46KB - Virtual size: 48KB