General

  • Target

    Voice.ai-Installer.exe

  • Size

    118.7MB

  • MD5

    11a7c1b5a5caca1aed098cecfd4163e6

  • SHA1

    2edc522edd2bad227d78d562f2525b91ec59b268

  • SHA256

    637b7b20aeef024d179298c169ab742e7d2fb2e47557c85604dfad738dd2da21

  • SHA512

    cbcaa261839e65d2ae569361dcd58e157a19b1e5c2bff31f1ed97b70b0b175ea4326ebd47f705c3cc50a424e15bc00837ef3d8efe76de47740e43e426ba01f57

  • SSDEEP

    3145728:wU8v8hbiah2oVewEsp26bc9pVE/63xgKu2xFx1bB:489qoVewEstbc9vR3hvxFPbB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • Voice.ai-Installer.exe
    .exe windows:4 windows x86 arch:x86

    f10e4da994053bf80c20cee985b32e29


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8e4c63f70f7cc6490634d743e795c93e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • 0.vai
  • AudioConverter.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • AudioEndpointUtility.dll
    .dll windows:6 windows x64 arch:x64

    d3944632de8e66e9c9d00fb410c45781


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioPX.dll
    .dll windows:6 windows x64 arch:x64

    552240e43bf55f4e1d0a01cc931ddb7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BsSndRpt.exe
    .exe windows:6 windows x86 arch:x86

    deb9d393dee9fe07637d3cbb37ea118f


    Code Sign

    Headers

    Imports

    Sections

  • BugSplatDotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BugSplatRc.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    c8e6b75cca778d02b43734f0176578f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    fd1fc82588fe45a17071b5743daee472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • DirectML.dll
    .dll windows:6 windows x64 arch:x64

    de90869f37e914fc01b99c913f65b5b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DriverManager.dll
    .dll windows:6 windows x64 arch:x64

    e67ce860d22421e843add6f543d735e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InTheHand.Net.Personal.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • VoiceAI.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • VoiceAIDriver/VoiceAIDriver.cat
  • VoiceAIDriver/VoiceAIDriver.inf
  • VoiceAIDriver/VoiceAIDriver.sys
    .sys windows:10 windows x64 arch:x64

    29457f992ec8c20c0fd2aff628a6977b


    Code Sign

    Headers

    Imports

    Sections

  • VoiceAILib.dll
    .dll windows:6 windows x64 arch:x64

    3cfb3be6750a32744ed07da831866866


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    b8793b2205b1ebd8d51e5b5dc83e7386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cudart64_110.dll
    .dll windows:6 windows x64 arch:x64

    c577dc1981d4855f4c2ac055d9340967


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbgshim.dll
    .dll windows:6 windows x64 arch:x64

    a8ae373a377301df4fccc75bacc4f0cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discord_game_sdk.dll
    .dll windows:6 windows x64 arch:x64

    e2e8552d3acf24f9596a702c655d73d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gcrypt.dll
    .dll windows:6 windows x64 arch:x64

    bda3b91ae31ad7d3ded38fe57466168b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hostfxr.dll
    .dll windows:6 windows x64 arch:x64

    47a46769022361bd28b15eebfe73017e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hostpolicy.dll
    .dll windows:6 windows x64 arch:x64

    9d1e1eb9919cfae06de54f89d268ee67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    403d8cc0d31f841d5bbf6b82c1ea957d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    d899245aed11af82d1f638c3132629cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x64 arch:x64

    a86f2778f73c11089dad776eef8b2444


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmp3lame.dll
    .dll windows:5 windows x64 arch:x64

    9658d0db9ba384d455119274571e0ccc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libsamplerate-0.dll
    .dll windows:5 windows x64 arch:x64

    ffb5ccd4e54ac5f5bf6502f0f16fc6b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libsndfile-1.dll
    .dll windows:4 windows x64 arch:x64

    0949285a3dfc1542f73c8087803de816


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/disabled/am.pak
  • locales/disabled/ar.pak
  • locales/disabled/bg.pak
  • locales/disabled/bn.pak
  • locales/disabled/ca.pak
  • locales/disabled/cs.pak
  • locales/disabled/da.pak
  • locales/disabled/de.pak
  • locales/disabled/el.pak
  • locales/disabled/en-GB.pak
  • locales/disabled/es-419.pak
  • locales/disabled/es.pak
  • locales/disabled/et.pak
  • locales/disabled/fa.pak
  • locales/disabled/fi.pak
  • locales/disabled/fil.pak
  • locales/disabled/fr.pak
  • locales/disabled/gu.pak
  • locales/disabled/he.pak
  • locales/disabled/hi.pak
  • locales/disabled/hr.pak
  • locales/disabled/hu.pak
  • locales/disabled/id.pak
  • locales/disabled/it.pak
  • locales/disabled/ja.pak
  • locales/disabled/kn.pak
  • locales/disabled/ko.pak
  • locales/disabled/lt.pak
  • locales/disabled/lv.pak
  • locales/disabled/ml.pak
  • locales/disabled/mr.pak
  • locales/disabled/ms.pak
  • locales/disabled/nb.pak
  • locales/disabled/nl.pak
  • locales/disabled/pl.pak
  • locales/disabled/pt-BR.pak
  • locales/disabled/pt-PT.pak
  • locales/disabled/ro.pak
  • locales/disabled/ru.pak
  • locales/disabled/sk.pak
  • locales/disabled/sl.pak
  • locales/disabled/sr.pak
  • locales/disabled/sv.pak
  • locales/disabled/sw.pak
  • locales/disabled/ta.pak
  • locales/disabled/te.pak
  • locales/disabled/th.pak
  • locales/disabled/tr.pak
  • locales/disabled/uk.pak
  • locales/disabled/vi.pak
  • locales/disabled/zh-CN.pak
  • locales/disabled/zh-TW.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • onnxruntime.dll
    .dll windows:6 windows x64 arch:x64

    897d81e8ea2c611ffee74f03d9685a3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onnxruntime_providers_shared.dll
    .dll windows:6 windows x64 arch:x64

    eb741a767a6a80709b865cd0789aabcf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opensource/cefsharp.txt
  • opensource/devcon.txt
  • opensource/libcotp.txt
  • opensource/libgcrypt.txt
  • opensource/libgpg-error.txt
  • opensource/libmp3lame.txt
  • opensource/libsamplerate.txt
  • opensource/libsndfile.txt
  • opensource/naudio.txt
  • opensource/newtonsoft.json.txt
  • opensource/onnxruntime.txt
  • opensource/swipe.txt
  • resources.pak
  • snapshot_blob.bin
  • tools/vc2019.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • v8_context_snapshot.bin
  • version