General

  • Target

    Synthesia-10.9-installer.exe

  • Size

    12.6MB

  • MD5

    90cc6471a52a768ce728c346c64cc6b7

  • SHA1

    70850acb2b9a92d8fd4464443a5a65ab8d48df3b

  • SHA256

    0454ec6deb1f32ac58d7bdf5b2ce92d30f017146a8aa356bafad95794d417eb5

  • SHA512

    178a53d2aca63c55432077b2f20cea6b915a13b3e350329591de945cb89812c1048ec186885754e6747ff46db4e76e931d90ec7777f8f5457eb00c8de2323968

  • SSDEEP

    393216:TMTBgTF3ifQHVk1k1rc9ewfRVQLlBr2r:TMlsDrc9ewpOj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Synthesia-10.9-installer.exe
    .exe windows:4 windows x86 arch:x86

    24f4223e271413c25abad52fd456a9bc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Synthesia.exe
    .exe windows:6 windows x64 arch:x64

    bac51608266f5e4b03a2750626ed0fd5


    Code Sign

    Headers

    Imports

    Sections

  • bass.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • bassmidi.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    047aec27169fe21274a3b2f2f30606c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • readme.html
    .html .js polyglot
  • uninstall.exe.nsis
  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    d5ec94ca50152cc1e7188b825074fef2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    bf380ca954cbf10d1a4cef9ec18e46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win10-midi.dll
    .dll windows:6 windows x64 arch:x64

    5c07d57d34406b9cb13b5fdc21f81d2e


    Code Sign

    Headers

    Imports

    Exports

    Sections