General

  • Target

    Install_Xfer_SerumFX_Update_136b8.exe

  • Size

    11.6MB

  • MD5

    e66a84a67f5874b7e042f99d5d4ff398

  • SHA1

    e3e66b86d3e9258b00fd55914ffde57ce5ad00af

  • SHA256

    ff3464532d05eada9e30ef1a925b9f9638e000b90f4d340d42d0f280966698fe

  • SHA512

    ebf59b65109cc42d81cf9874abb4c08e013d994e4c87e5edebff94938cfd971994712b205158913b2c0485879ecbccd62fdd0882b8a06ebeabb731fa1c351247

  • SSDEEP

    196608:u0QHN32H1mRsfd4gik3wqsOSBoa5tYUpSJXMuWOybu0z8UDmgIKQIfU9SXEVBHRl:u0Qvad47qshH5LYGuWTpz8omIQ4U9YQJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • Install_Xfer_SerumFX_Update_136b8.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    4d85954a016da6eba41af38db29369a8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $_13_/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    68a52d7dd14ee2effbb73575ae8a0035


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    dae8b96f4e977c1ec4d28b47d2fef065


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    dedcc53db272adb41940abc22c6be78f


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    dae8b96f4e977c1ec4d28b47d2fef065


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    dedcc53db272adb41940abc22c6be78f


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/VST3/SerumFX.vst3/Contents/Resources/Snapshots/56535458667359736572756D66780000_snapshot.png
    .png
  • C:/Program Files/Common Files/VST3/SerumFX.vst3/Contents/Resources/Snapshots/56535458667359736572756D66780000_snapshot_2.0x.png
    .png
  • C:/Program Files/Common Files/VST3/SerumFX.vst3/Contents/moduleinfo.json
  • C:/Program Files/Common Files/VST3/SerumFX.vst3/Contents/x86_64-win/SerumFX.vst3
    .dll windows:6 windows x64 arch:x64

    1acb26074950922af71aedb438ef7ee2


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/VST3/SerumFX.vst3/PlugIn.ico
  • C:/Program Files/Common Files/VST3/SerumFX.vst3/desktop.ini
  • SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    694bbdd01d5262771f27e7c775c63322


    Headers

    Imports

    Exports

    Sections