Voicemeeter8Setup[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
Voicemeeter8Setup.bin
Size 60.2MB
Sample260507-lmvmjaay21
SHA256 d50c871aa746df69a6bbeacd9c911b6a56314da3f24cc8a4f55a6bcb5480ef75
MD5 532a70594e4a7554d7db89b6de1810e1
SHA1 d988c3fe7432b79d7f7b0fead8ec2889ba198111
SHA512 76eee7ccd82cb5852fd61bfcd533494f18dee582dbd79a1efe3ba9e20e07857186156b58fd52fb1be897322195feff9668c2927890caa8035dbc195646cd99bb
SSDEEP 1572864:cCj7HgtFAGVsD0fYWkzLilUjNiqSdFC1FAF7wMUi6mN:cA7At3CQhlKnG8yF78Q
TLSH
T12DD7222F1424C158D267463667FFC6001861FF1CB6C76C861954B8AAFA39F364EADBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
Voicemeeter8Setup.bin

File Explorer

Voicemeeter8Setup.bin

.exe 60.2MB

Voicemeeter8Setup.bin

IMPHASH 31d23ccf844708ba42abf770e821a601
SHA256 d50c871aa746df69a6bbeacd9c911b6a56314da3f24cc8a4f55a6bcb5480ef75
MD5 532a70594e4a7554d7db89b6de1810e1
SHA1 d988c3fe7432b79d7f7b0fead8ec2889ba198111
SHA512 76eee7ccd82cb5852fd61bfcd533494f18dee582dbd79a1efe3ba9e20e07857186156b58fd52fb1be897322195feff9668c2927890caa8035dbc195646cd99bb
SSDEEP 1572864:cCj7HgtFAGVsD0fYWkzLilUjNiqSdFC1FAF7wMUi6mN:cA7At3CQhlKnG8yF78Q
TLSH
T12DD7222F1424C158D267463667FFC6001861FF1CB6C76C861954B8AAFA39F364EADBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

e5:5c:18:d0:26:a4:3d:c4:62:3e:b2:16:9a:ff:dd:84:ee:29:3f:91

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=423 734 177,CN=BUREL VINCENT,O=BUREL VINCENT,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 11, 2022

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

30:c1:a5:19:82:75:d8:6b:3a:d8:7f:5b

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 21, 2021 - May 22, 2023

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

38642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeviceIoControl CreateFileA QueryDosDeviceA GetDiskFreeSpaceExA GetVolumeInformationA GetDriveTypeA WriteFile SetFilePointer CreateDirectoryA RemoveDirectoryA WideCharToMultiByte VirtualFree VirtualAlloc SetFileAttributesA SetStdHandle GetStringTypeW GetStringTypeA TlsGetValue SetLastError TlsAlloc TlsSetValue GetCurrentThreadId GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter TerminateProcess RtlUnwind HeapCreate HeapDestroy GetEnvironmentVariableA LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection ExitProcess GetVersion MultiByteToWideChar GetModuleHandleA GetCurrentProcess GetVersionExA GetCurrentDirectoryA GetSystemTime GetSystemDirectoryA GetTickCount CreateMutexA GetLastError ReleaseMutex GetCurrentThread SetThreadPriority CreateThread GetCommandLineA GetStartupInfoA HeapFree CopyFileA CreateProcessA WaitForSingleObject GetExitCodeProcess CloseHandle Sleep FindResourceA LoadResource LockResource SizeofResource FreeResource LoadLibraryA GetProcAddress FreeLibrary GetWindowsDirectoryA GetModuleFileNameA FindFirstFileA DeleteFileA FindNextFileA FlushFileBuffers FindClose HeapReAlloc HeapAlloc InterlockedIncrement InterlockedDecrement MoveFileA

user32

LoadBitmapA DrawTextA PostMessageA GetMessageA LoadCursorA ReleaseDC GetDC DispatchMessageA TranslateMessage GetClassNameA GetWindowTextA EnumWindows GetWindow LoadIconA RegisterClassA CreateWindowExA ShowWindow UpdateWindow SystemParametersInfoA GetSystemMetrics SetWindowPos SetTimer SetFocus BeginPaint EndPaint KillTimer PostQuitMessage SetCursor DefWindowProcA MessageBoxA

gdi32

Rectangle GetStockObject SetTextColor RoundRect SetBkMode CreateCompatibleDC SelectObject BitBlt DeleteDC DeleteObject CreateFontIndirectA GetObjectA

advapi32

RegOpenKeyExA RegDeleteKeyA RegEnumKeyExA RegCreateKeyA RegSetValueExA RegOpenKeyA RegQueryValueExA RegCloseKey

shell32

ShellExecuteA

ole32

CoUninitialize CoInitialize CoCreateInstance CoFreeLibrary

setupapi

SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA

Sharing

General

Malware Config

Signatures

File Explorer

Voicemeeter8Setup.bin

kernel32

user32

gdi32

advapi32

shell32

ole32

setupapi

generic