Staccato Installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Staccato Installer.exe
Size 16.4MB
Sample260623-e4kekaaw6t
SHA256 2d6742c1c73a075966923a2fe1aabf5b4c7d4f3ee3edd213d7f45106352ec8d5
MD5 6e8d00cdcb0f1ed5729c6bb232cd7f98
SHA1 4f05550a6e3b0cc4074f8e50ba0e4b481f85ee46
SHA512 9ee1b44cd847a22e0bd019c0fb10e589ee1fc568ec1ece23b891f2855af82363e541f8b19b694ef4f7f775bf5944eaf7429dccac9c70f163155bdff77e274b45
SSDEEP 393216:7SXafRoMRouffg2TPB8N82LlQQ+fvi7gy80oV38zgXUgqcOQ+RMNgEGOLKNt6:7AaftRoKQ2KM6oik7OQGagEG6l
TLSH
T189073377FC19B36BDC0524F04CC5EF894885CDA4E3EA2235EBC036AB9D72B15D51922A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.aaxplugin
unpack001/$PROGRAMFILES64/Common Files/VST3/Staccato.vst3

File Explorer

Staccato Installer.exe

.exe 16.4MB
$PLUGINSDIR/System.dll

.dll 12KB
$PLUGINSDIR/modern-header.bmp

25KB
$PLUGINSDIR/modern-wizard.bmp

150KB
$PLUGINSDIR/nsDialogs.dll

.dll 9KB
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.aaxplugin

.dll 10.9MB
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/PlugIn.ico

21KB
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/desktop.ini

126B
$PROGRAMFILES64/Common Files/VST3/Staccato.vst3

.dll 11.1MB
Staccato.exe

.exe 12.0MB

Staccato Installer.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 2d6742c1c73a075966923a2fe1aabf5b4c7d4f3ee3edd213d7f45106352ec8d5
MD5 6e8d00cdcb0f1ed5729c6bb232cd7f98
SHA1 4f05550a6e3b0cc4074f8e50ba0e4b481f85ee46
SHA512 9ee1b44cd847a22e0bd019c0fb10e589ee1fc568ec1ece23b891f2855af82363e541f8b19b694ef4f7f775bf5944eaf7429dccac9c70f163155bdff77e274b45
SSDEEP 393216:7SXafRoMRouffg2TPB8N82LlQQ+fvi7gy80oV38zgXUgqcOQ+RMNgEGOLKNt6:7AaftRoKQ2KM6oik7OQGagEG6l
TLSH
T189073377FC19B36BDC0524F04CC5EF894885CDA4E3EA2235EBC036AB9D72B15D51922A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6c:23:9e:ce:a3:75:a7:04:2c:cc:ee:ce:ab:cc:ac:b3:69:3e:35:0b:01:1d:f0:21:ba:e9:8d:3b:31:4f:8e:5e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

Chains

Jun 6, 2026

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

Serial Number

33:00:01:ad:63:2d:cb:ed:b1:20:d9:61:e8:00:00:00:01:ad:63

Issuer

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 4, 2026 - Jun 7, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:55:d9:dd:69:26:28:f9:f8:e2:00:00:00:00:00:55

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

Major OS version

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.aaxplugin

IMPHASH ea8645bf595df25f7faf4df2b3307414
SHA256 15df14bf0db23593f381c12ad78f4bc87c95ff5e761d3ab6bdc958324055864a
MD5 06e3ad8a7bf7a9dbb45eaa4b9700e9b0
SHA1 41b1fb2cdd853f05d82350d4593e76c1eeb7e613
SHA512 7ce8309f7987e74d14d45895518d59dcb13259b7dfacf58527125ff587de43d182832a88b4759c6e81e7b7297d3963ffef076ebd58551e94574e010c57c47764
SSDEEP 196608:vXFmeznRxWujjSrl5mKWE2NtZlRh2BBlkBBBUBBBBBBYkBkkkk4BBlkkkBBBBBlP:PFmIfnjjkl5mbFNt98f
TLSH
T128C69F4AB26540D4D07AC0BDC6979656F7723C150324EBDB15A4CB6ABF33FE24E7A220
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2451548

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\jeff\Documents\_STACCATO\jam\Builds\VisualStudio2022\x64\Release\AAX\Staccato.pdb

kernel32

Sleep GetFileInformationByHandle FormatMessageW GetLastError GetFileAttributesExW OutputDebugStringW SetEvent GetLogicalProcessorInformation GetCurrentThread TerminateThread QueryPerformanceFrequency GetThreadPriority DeleteFileW GetNativeSystemInfo LoadLibraryW GetCurrentDirectoryW GetOverlappedResult GetProcAddress LocalFree ReplaceFileW DeleteCriticalSection ExitProcess GetModuleHandleW FreeLibrary CopyFileW CreateFileMappingW MapViewOfFile QueryPerformanceCounter MoveFileW GetDriveTypeW IsDebuggerPresent ConnectNamedPipe SetUnhandledExceptionFilter FlushFileBuffers CompareStringOrdinal GlobalSize LoadLibraryA GlobalAlloc GlobalFree GlobalLock GetCurrentProcessId GlobalUnlock GetCommandLineW AttachConsole MultiByteToWideChar GetFileSize AreFileApisANSI HeapCreate HeapFree GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile GetFullPathNameA UnlockFileEx HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA HeapReAlloc RaiseException GetSystemInfo HeapAlloc HeapCompact HeapDestroy UnlockFile LockFileEx GetProcessHeap SystemTimeToFileTime WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA GetTickCount ResetEvent GetPriorityClass SetStdHandle GetSystemDirectoryW GetLogicalDriveStringsW GetEnvironmentStringsW GetCommandLineA FindFirstFileExW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle FreeLibraryAndExitThread ExitThread CreateThread GetTimeZoneInformation LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError InterlockedFlushSList RtlUnwindEx InitializeSListHead GetStartupInfoW UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx InitOnceBeginInitialize InitOnceComplete CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RtlPcToFileHeader GetTickCount64 SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetExitCodeThread SwitchToThread GetFileAttributesW CreateFileW CreateEventW DisconnectNamedPipe GetModuleHandleA UnmapViewOfFile ResumeThread FreeEnvironmentStringsW GetLocaleInfoW FindClose CreateMutexW GetTempPathW SetEndOfFile SetFilePointer InitializeCriticalSection LeaveCriticalSection SetThreadPriority WaitForMultipleObjects GetModuleFileNameW GetFinalPathNameByHandleW RemoveDirectoryW CreateMutexA TerminateProcess GetModuleHandleExW WriteFile GetCurrentProcess FindNextFileW EnterCriticalSection SetPriorityClass FindFirstFileW CancelIo GetVolumeInformationW TryEnterCriticalSection ReadFile GetSystemFirmwareTable SetThreadAffinityMask CreateDirectoryW CloseHandle ReleaseMutex GetCurrentThreadId WaitForSingleObject SetEnvironmentVariableW WriteConsoleW

user32

GetCursorPos ReleaseDC SetCursorPos GetAncestor ReleaseCapture BeginPaint EndPaint SendInput MonitorFromWindow GetClientRect SystemParametersInfoW InvalidateRect GetWindowThreadProcessId AttachThreadInput GetParent EnableMenuItem EnumDisplaySettingsW GetDesktopWindow ShowCaret DrawIconEx UpdateLayeredWindow GetSystemMetricsForDpi SetCursor ToUnicode SetClipboardData SetWindowsHookExW SetCapture DestroyCaret LoadCursorW EnumDisplayDevicesW LoadIconW GetClipboardData TranslateMessage BringWindowToTop SetFocus SetLayeredWindowAttributes MoveWindow CallWindowProcW GetMessageTime EnumWindows UnhookWindowsHookEx GetForegroundWindow TrackMouseEvent ValidateRect MapWindowPoints CreateCaret IsChild PeekMessageW EmptyClipboard CloseClipboard CreateIconIndirect GetMonitorInfoW GetWindowInfo VkKeyScanW DestroyIcon RedrawWindow GetCapture OpenClipboard GetAsyncKeyState IsWindow ShowWindow GetActiveWindow SetCaretPos GetKeyboardState DestroyCursor GetWindowPlacement WindowFromPoint RegisterClassExW GetWindowLongPtrW MessageBeep SetWindowTextW UnregisterClassW EndDialog CallNextHookEx SendMessageW GetMessageW SendMessageTimeoutW DispatchMessageW SendNotifyMessageW GetWindowTextW DefWindowProcW GetSystemMenu GetMessageExtraInfo GetIconInfo CreateWindowExW EnumDisplayMonitors GetMessagePos SetWindowLongPtrW EnumChildWindows ValidateRgn GetDpiForWindow SetWindowPos IsWindowVisible GetDC DestroyWindow GetFocus GetWindowRect MapVirtualKeyW PostMessageW GetUpdateRgn

gdi32

SaveDC GetDeviceCaps GetRegionData GetObjectW ExcludeClipRect SetStretchBltMode RestoreDC CreateBitmap StretchDIBits SelectObject CreateCompatibleDC DeleteDC SetMapperFlags DeleteObject SetMapMode CreateFontIndirectW BitBlt SetBrushOrgEx StretchBlt CombineRgn CreateDIBSection CreateRectRgnIndirect CreateRectRgn

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

GetNamedSecurityInfoW OpenProcessToken DuplicateToken MapGenericMask GetTokenInformation AccessCheck

shell32

SHParseDisplayName ExtractAssociatedIconW Shell_NotifyIconW SHGetKnownFolderPath SHBrowseForFolderW SHGetMalloc SHCreateShellItem DragQueryFileW SHGetSpecialFolderPathW ShellExecuteW SHGetPathFromIDListW

ole32

PropVariantClear OleCreate OleSetContainedObject RevokeDragDrop CoInitializeEx RegisterDragDrop OleInitialize DoDragDrop CoTaskMemFree CoUninitialize CoTaskMemAlloc OleUninitialize CoCreateInstance

oleaut32

SafeArrayPutElement SysAllocString SafeArrayCreateVector SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData

wininet

InternetSetOptionW InternetReadFile HttpOpenRequestW InternetConnectW InternetCloseHandle HttpSendRequestExW HttpEndRequestW InternetCrackUrlW InternetSetFilePointer HttpQueryInfoW InternetOpenW FtpOpenFileW InternetWriteFile

shlwapi

PathStripToRootW

winmm

midiInGetNumDevs timeKillEvent timeGetTime timeSetEvent timeBeginPeriod midiInMessage midiInUnprepareHeader midiInOpen midiOutGetDevCapsW midiOutPrepareHeader midiOutOpen midiInReset midiInPrepareHeader midiOutUnprepareHeader midiInStart midiInClose midiInAddBuffer midiOutMessage midiInGetDevCapsW midiInStop midiOutClose midiOutLongMsg midiOutGetNumDevs midiOutShortMsg

d2d1

ord1

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmAssociateContext ImmGetCompositionStringW ImmReleaseContext ImmGetContext ImmNotifyIME

comctl32

ord345

dwmapi

DwmExtendFrameIntoClientArea

ws2_32

closesocket bind accept __WSAFDIsSet inet_addr send inet_ntoa recv getsockopt htonl ioctlsocket sendto select getaddrinfo WSAStartup freeaddrinfo htons setsockopt

Name

.text

Size

6.7MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

211KB

Virtual Size

277KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

338KB

Virtual Size

338KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PROGRAMFILES64/Common Files/VST3/Staccato.vst3

IMPHASH 031d15e0651d6c201ba708d24f8236cc
SHA256 c48c8846ddf531094223c80922041a4ebb418910cc34a60e2898aba99ff090c8
MD5 5c1d6618f0500c9e6bb038e0b0bc7595
SHA1 e5ee06d5f0f508528fecf3556e2f15b681486479
SHA512 4252e2518e003d1826d961f9acb4189849d2218ccbcfbdb3337c571e7e079c22873aa2a1891fa01e4c28f8b9021b3bc16571dcd62ece61e7f89d641ecfacab28
SSDEEP 196608:s+HxyywrRw/4YKem1Jd8wtplRB2BBlkBBBUBBBBBBYkBkkkk4BBlkkkBBBBBlBUH:s+HxL0g4YKemXewtEk
TLSH
T16EC69E9A727940D8D07AD0BDC7939917EBB138150324DBDB05A49A6A7F37FE10E7A320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2612552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\jeff\Documents\_STACCATO\jam\Builds\VisualStudio2022\x64\Release\VST3\Staccato.pdb

kernel32

GetLogicalDriveStringsW CreateEventW Sleep GetFileInformationByHandle FormatMessageW GetLastError GetFileAttributesExW OutputDebugStringW SetEvent GetLogicalProcessorInformation GetCurrentThread TerminateThread QueryPerformanceFrequency GetThreadPriority DeleteFileW CloseHandle GetNativeSystemInfo LoadLibraryW GetCurrentDirectoryW GetOverlappedResult GetProcAddress LocalFree ReplaceFileW ExitProcess GetModuleHandleW FreeLibrary CopyFileW CreateFileMappingW MapViewOfFile QueryPerformanceCounter MoveFileW GetDriveTypeW ConnectNamedPipe SetUnhandledExceptionFilter FlushFileBuffers GetCommandLineW AttachConsole CompareStringOrdinal GlobalSize LoadLibraryA GlobalAlloc GlobalFree GlobalLock GetCurrentProcessId GlobalUnlock GetFileSize AreFileApisANSI HeapCreate HeapFree GetFullPathNameW GetDiskFreeSpaceW LockFile GetFullPathNameA UnlockFileEx HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA HeapReAlloc RaiseException GetSystemInfo HeapAlloc HeapCompact HeapDestroy UnlockFile LockFileEx GetProcessHeap SystemTimeToFileTime GetSystemTimeAsFileTime GetSystemTime FormatMessageA GetTickCount ResetEvent GetPriorityClass SetStdHandle CreateFileW GetModuleHandleA GetEnvironmentStringsW GetCommandLineA FindFirstFileExW GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx GetConsoleOutputCP GetFileType GetStdHandle ReadConsoleW GetConsoleMode SetFilePointerEx FreeLibraryAndExitThread ExitThread CreateThread GetTimeZoneInformation LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError InterlockedFlushSList RtlUnwindEx InitializeSListHead GetStartupInfoW UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo CompareStringEx GetStringTypeW LCMapStringEx GetLocaleInfoEx DecodePointer EncodePointer InitializeCriticalSectionEx InitOnceBeginInitialize InitOnceComplete CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RtlPcToFileHeader GetTickCount64 SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetExitCodeThread SwitchToThread WaitForSingleObject GetLocaleInfoW DisconnectNamedPipe UnmapViewOfFile ResumeThread GetSystemDirectoryW ReleaseMutex GetCurrentThreadId FreeEnvironmentStringsW FindClose CreateMutexW GetTempPathW SetEndOfFile SetFilePointer SetThreadPriority WaitForMultipleObjects GetModuleFileNameW GetFinalPathNameByHandleW RemoveDirectoryW TerminateProcess GetModuleHandleExW WriteFile GetCurrentProcess TryEnterCriticalSection FindNextFileW SetPriorityClass FindFirstFileW CancelIo GetVolumeInformationW ReadFile GetSystemFirmwareTable SetThreadAffinityMask GetFileAttributesW CreateDirectoryW IsDebuggerPresent WideCharToMultiByte DeleteCriticalSection MultiByteToWideChar InitializeCriticalSection LeaveCriticalSection OutputDebugStringA EnterCriticalSection SetEnvironmentVariableW WriteConsoleW

user32

GetWindowThreadProcessId InvalidateRect SystemParametersInfoW GetClientRect MonitorFromWindow GetWindowTextW TranslateMessage SendNotifyMessageW AttachThreadInput EnumWindows GetMessageExtraInfo GetSystemMenu MoveWindow PeekMessageW DispatchMessageW RegisterClassExW GetWindowLongPtrW UnregisterClassW CreateWindowExW SetWindowLongPtrW DestroyWindow GetFocus SendMessageTimeoutW PostMessageW DefWindowProcW GetMessageW SendInput EndPaint BeginPaint GetCursorPos ReleaseDC SetCursorPos GetAncestor ReleaseCapture GetParent CallWindowProcW SetFocus EnableMenuItem EnumDisplaySettingsW GetDesktopWindow ShowCaret DrawIconEx UpdateLayeredWindow GetSystemMetricsForDpi SetCursor ToUnicode SetClipboardData SetWindowsHookExW SetCapture DestroyCaret LoadCursorW EnumDisplayDevicesW LoadIconW GetClipboardData BringWindowToTop SetLayeredWindowAttributes GetMessageTime UnhookWindowsHookEx GetForegroundWindow TrackMouseEvent ValidateRect MapWindowPoints CreateCaret IsChild EmptyClipboard CloseClipboard CreateIconIndirect GetMonitorInfoW GetWindowInfo VkKeyScanW DestroyIcon RedrawWindow GetCapture OpenClipboard GetUpdateRgn GetMessagePos MapVirtualKeyW GetWindowRect GetDC IsWindowVisible SetWindowPos GetDpiForWindow ValidateRgn EnumChildWindows GetAsyncKeyState GetIconInfo IsWindow ShowWindow GetActiveWindow SetCaretPos GetKeyboardState DestroyCursor GetWindowPlacement WindowFromPoint MessageBeep SetWindowTextW EndDialog CallNextHookEx SendMessageW EnumDisplayMonitors

gdi32

CreateRectRgnIndirect SetStretchBltMode RestoreDC CreateBitmap CombineRgn SelectObject CreateCompatibleDC DeleteDC GetRegionData DeleteObject SetMapMode CreateFontIndirectW StretchDIBits StretchBlt CreateDIBSection SaveDC BitBlt SetBrushOrgEx CreateRectRgn SetMapperFlags GetDeviceCaps ExcludeClipRect GetObjectW

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

OpenProcessToken DuplicateToken MapGenericMask GetNamedSecurityInfoW GetTokenInformation AccessCheck

shell32

DragQueryFileW SHGetSpecialFolderPathW SHGetMalloc ExtractAssociatedIconW SHBrowseForFolderW SHGetKnownFolderPath SHParseDisplayName SHGetPathFromIDListW Shell_NotifyIconW ShellExecuteW SHCreateShellItem

ole32

CoCreateGuid OleCreate OleSetContainedObject RevokeDragDrop CoInitializeEx RegisterDragDrop DoDragDrop CoTaskMemFree CoUninitialize CoTaskMemAlloc OleInitialize OleUninitialize CoCreateInstance PropVariantClear

oleaut32

SafeArrayCreateVector SafeArrayDestroy SysAllocString SafeArrayPutElement SafeArrayUnaccessData SafeArrayAccessData

wininet

InternetConnectW InternetReadFile InternetSetOptionW HttpOpenRequestW InternetCloseHandle HttpSendRequestExW HttpEndRequestW InternetCrackUrlW InternetSetFilePointer HttpQueryInfoW InternetOpenW FtpOpenFileW InternetWriteFile

shlwapi

PathStripToRootW

winmm

midiOutMessage timeKillEvent timeGetTime timeSetEvent timeBeginPeriod midiInMessage midiInUnprepareHeader midiInOpen midiOutGetDevCapsW midiOutPrepareHeader midiOutOpen midiInReset midiInPrepareHeader midiInGetDevCapsW midiInStart midiInClose midiInAddBuffer midiOutUnprepareHeader midiInGetNumDevs midiInStop midiOutClose midiOutLongMsg midiOutGetNumDevs midiOutShortMsg

d2d1

ord1

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmAssociateContext ImmGetCompositionStringW ImmReleaseContext ImmGetContext ImmNotifyIME

comctl32

ord345

dwmapi

DwmExtendFrameIntoClientArea

ws2_32

closesocket bind accept __WSAFDIsSet send inet_ntoa recv getsockopt htonl setsockopt ioctlsocket sendto select getaddrinfo WSAStartup freeaddrinfo inet_addr htons

Name

.text

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

215KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

345KB

Virtual Size

344KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Staccato.exe

IMPHASH a8f01f96ebde135b7513ed33c891b744
SHA256 5e3f28f1637e346ae57accc67f7717064ec8a64d8e3b9e56969e7c30eb7c3e9a
MD5 2e2c47e3164a04f4c1b01f44ee8d0b62
SHA1 9e40e0d89fbed17c6eb09ea8eaca57df9ad314f3
SHA512 bad519f80f1dd0b38e250e8e5eb8b7c9ffc18315ec785123b8c3dac4f92bae68233d5e8e8266c637834ced9143978b6bbcef1351207a54ea0e7646c266a0543b
SSDEEP 196608:C1lZtDUvSKMGwtG+7NLml49TKtjblPUBBBBBlkBBBUBBBBBBYkBkkkk4BBlkkkBg:C1lZtpQwtGkNLmChKtf
TLSH
T1EAC6AF87B26540D4C1BAC079C6929526FB727C190320DFDB15A49A6ABF37EE14F7E320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

b0:69:70:fd:09:c6:f4:e8:c2:4e:14:62:17:dc:05:88:59:af:5e:7d:20:71:70:7d:58:0f:8d:32:3c:96:43:24

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

Chains

Jun 6, 2026

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=Staccato AI Inc.,O=Staccato AI Inc.,L=London,ST=Ontario,C=CA

Serial Number

33:00:01:ad:63:2d:cb:ed:b1:20:d9:61:e8:00:00:00:01:ad:63

Issuer

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 4, 2026 - Jun 7, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

Major OS version

Entry point

2541416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\jeff\Documents\_STACCATO\jam\Builds\VisualStudio2022\x64\Release\Standalone Plugin\Staccato.pdb

kernel32

GetFileAttributesW ReleaseMutex GetSystemDirectoryW ResumeThread UnmapViewOfFile DisconnectNamedPipe GetLogicalDriveStringsW CreateEventW Sleep GetFileInformationByHandle GetFileAttributesExW OutputDebugStringW SetEvent GetLogicalProcessorInformation GetCurrentThread TerminateThread QueryPerformanceFrequency GetThreadPriority DeleteFileW CloseHandle GetNativeSystemInfo GetCurrentDirectoryW GetOverlappedResult LocalFree ReplaceFileW DeleteCriticalSection ExitProcess GetModuleHandleW CopyFileW CreateFileMappingW MapViewOfFile QueryPerformanceCounter MoveFileW GetDriveTypeW IsDebuggerPresent ConnectNamedPipe SetUnhandledExceptionFilter FlushFileBuffers GetCommandLineW AttachConsole ResetEvent GetPriorityClass MultiByteToWideChar GetFileSize AreFileApisANSI HeapCreate HeapFree GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile GetFullPathNameA UnlockFileEx HeapValidate HeapSize GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA HeapReAlloc RaiseException GetSystemInfo HeapAlloc HeapCompact HeapDestroy UnlockFile LockFileEx GetProcessHeap SystemTimeToFileTime WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA GetTickCount SetStdHandle SetEnvironmentVariableW WaitForSingleObject GetEnvironmentStringsW GetCommandLineA FindFirstFileExW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetOEMCP GetACP IsValidCodePage GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle FreeLibraryAndExitThread ExitThread CreateThread GetTimeZoneInformation LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RtlUnwindEx InitializeSListHead GetStartupInfoW UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetTickCount64 SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceBeginInitialize InitOnceComplete GetExitCodeThread SwitchToThread CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RtlPcToFileHeader InitializeCriticalSection CreateFileW GetLocaleInfoW FindClose CreateMutexW GetTempPathW SetEndOfFile SetFilePointer LeaveCriticalSection SetThreadPriority WaitForMultipleObjects GetFinalPathNameByHandleW RemoveDirectoryW TerminateProcess GetModuleHandleExW WriteFile GetCurrentProcess FindNextFileW EnterCriticalSection SetPriorityClass FindFirstFileW GetModuleFileNameW CancelIo GetVolumeInformationW TryEnterCriticalSection ReadFile GetSystemFirmwareTable SetThreadAffinityMask CreateDirectoryW GlobalUnlock FreeLibrary GetCurrentProcessId GlobalLock GetProcAddress LoadLibraryW GlobalFree GlobalAlloc LoadLibraryA GlobalSize GetLastError FormatMessageW GetModuleHandleA GetCurrentThreadId CompareStringOrdinal FreeEnvironmentStringsW WriteConsoleW

user32

GetParent SystemParametersInfoW EnableMenuItem EnumDisplaySettingsW GetDesktopWindow ReleaseCapture InvalidateRect GetAncestor SetCursorPos ReleaseDC GetCursorPos BeginPaint EndPaint SendInput ShowCaret DrawIconEx UpdateLayeredWindow GetClientRect GetSystemMetricsForDpi SetCursor ToUnicode SetClipboardData SetWindowsHookExW SetCapture DestroyCaret LoadCursorW EnumDisplayDevicesW LoadIconW GetClipboardData TranslateMessage BringWindowToTop SetFocus SetLayeredWindowAttributes GetMessageTime EnumWindows UnhookWindowsHookEx MoveWindow CallWindowProcW GetForegroundWindow TrackMouseEvent ValidateRect MapWindowPoints CreateCaret IsChild PeekMessageW EmptyClipboard CloseClipboard CreateIconIndirect GetMonitorInfoW GetWindowInfo VkKeyScanW DestroyIcon RedrawWindow GetCapture OpenClipboard GetAsyncKeyState IsWindow ShowWindow GetActiveWindow SetCaretPos GetKeyboardState DestroyCursor GetWindowPlacement GetMessageW SendMessageTimeoutW DispatchMessageW SendNotifyMessageW GetWindowTextW AttachThreadInput GetWindowThreadProcessId DefWindowProcW WindowFromPoint RegisterClassExW GetWindowLongPtrW MessageBeep SetWindowTextW UnregisterClassW EndDialog CallNextHookEx SendMessageW GetIconInfo CreateWindowExW EnumDisplayMonitors SetWindowLongPtrW EnumChildWindows ValidateRgn GetMessageExtraInfo MonitorFromWindow GetDpiForWindow SetWindowPos IsWindowVisible GetDC DestroyWindow GetFocus GetWindowRect MapVirtualKeyW PostMessageW GetMessagePos GetUpdateRgn GetSystemMenu

gdi32

SetBrushOrgEx CreateCompatibleDC StretchDIBits CreateRectRgnIndirect GetDeviceCaps CreateRectRgn DeleteDC GetRegionData SelectObject ExcludeClipRect SetStretchBltMode RestoreDC DeleteObject SetMapMode CreateBitmap CombineRgn CreateFontIndirectW SetMapperFlags SaveDC GetObjectW BitBlt CreateDIBSection StretchBlt

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

GetNamedSecurityInfoW OpenProcessToken DuplicateToken MapGenericMask GetTokenInformation AccessCheck

shell32

SHParseDisplayName Shell_NotifyIconW ShellExecuteW SHGetPathFromIDListW SHGetKnownFolderPath SHBrowseForFolderW ExtractAssociatedIconW SHGetMalloc SHCreateShellItem DragQueryFileW SHGetSpecialFolderPathW

ole32

OleCreate OleSetContainedObject PropVariantClear CoInitialize RevokeDragDrop CoInitializeEx RegisterDragDrop OleInitialize DoDragDrop CoTaskMemFree CoCreateInstance CoUninitialize CoTaskMemAlloc OleUninitialize

oleaut32

SafeArrayPutElement SysAllocString SafeArrayCreateVector SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData

wininet

shlwapi

PathStripToRootW

winmm

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmAssociateContext ImmGetCompositionStringW ImmReleaseContext ImmGetContext ImmNotifyIME

comctl32

ord345

dwmapi

DwmExtendFrameIntoClientArea

d2d1

ord1

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

ws2_32

closesocket bind accept __WSAFDIsSet inet_addr send inet_ntoa recv getsockopt htonl ioctlsocket sendto select getaddrinfo WSAStartup freeaddrinfo htons setsockopt

Name

.text

Size

7.1MB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

215KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

352KB

Virtual Size

351KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Staccato Installer.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.aaxplugin

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

shlwapi

winmm

d2d1

dxgi

d3d11

dcomp

imm32

comctl32

dwmapi

ws2_32

generic

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/PlugIn.ico

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/desktop.ini

$PROGRAMFILES64/Common Files/VST3/Staccato.vst3

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

shlwapi

winmm

d2d1

dxgi

d3d11

dcomp

imm32

comctl32

dwmapi

ws2_32

generic

Staccato.exe

kernel32

user32

gdi32

comdlg32

advapi32

shell32