General

  • Target

    Aspect-2.0.3.exe

  • Size

    18.0MB

  • MD5

    770ba56f06a1670e27f6e854b5593870

  • SHA1

    62b6c0eba6c4309aa9b94c6b859eda67f41b92b7

  • SHA256

    e8f92ef53e47d2ffdcf9453cdd9c51c645f21992e2f666c69037b49f9d4c83d8

  • SHA512

    6c7ed3b708900f5d1c8c993883cb7257cd0613824a9c228cafea2af88efc69e6fbef1383c442724cf7fbf06076e9e4c64dc95a8a42fa9148965e20338f530b24

  • SSDEEP

    393216:p6jxXbKtwbUR40OvQI74y7W710hgQhOzzfvQIX2evM6tD+81FVp56GvL:pybU2YoW710PELv6G+eFfYGvL

Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • Aspect-2.0.3.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $COMMONFILES64/Avid/Audio/Plug-Ins/$_16_.aaxplugin/Contents/x64/$_16_.aaxplugin
    .dll windows:6 windows x64 arch:x64

    9de0a730948e941d6bf25bfc97dd52a9


    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES64/Avid/Audio/Plug-Ins/$_16_.aaxplugin/PlugIn.ico
  • $COMMONFILES64/Avid/Audio/Plug-Ins/$_16_.aaxplugin/desktop.ini
  • $COMMONFILES64/VST3/$COMMONFILES64/VST3/$_16_.vst3/Contents/Resources/moduleinfo.json
  • $COMMONFILES64/VST3/$COMMONFILES64/VST3/$_16_.vst3/Contents/x86_64-win/$_16_.vst3
    .dll windows:6 windows x64 arch:x64

    bfd0ed278bf2b47af112d937b4b83759


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $_14_/$_16_VST64.dll
    .dll windows:6 windows x64 arch:x64

    e31b854c44f066b9e179d9bd333d3c32


    Headers

    Imports

    Exports

    Sections

  • $_16_.exe
    .exe windows:6 windows x64 arch:x64

    9f3b4a9deadb2a0e252884f442ad92a4


    Headers

    Imports

    Sections

  • $_18_
    .pdf
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections