Session Guitarist - Picked Acoustic 1[.]1[.]0 Setup PC[.]exe

General

Target
Session Guitarist - Picked Acoustic 1.1.0 Setup PC.exe
Size 3.5MB
Sample260718-qcd91scs5k
SHA256 a7cfaf4c0530fbf8c440b42427acd8c2cd043a6f08ae8fc15b89be9130fd8c73
MD5 84edab71707950b59f771b7b1aa4491e
SHA1 3e9f83f442fe0b46472fa2fb590fe013e64ac03f
SHA512 08a261b4243d2445ae018bb99db951ee41c832e9c10d1ea2c3f41b70c895aa07c8d50ee947f5cdedd693b90c00f7c70c035fbf9629b212aaa6d6147d32e1f688
SSDEEP 98304:VgXgekwnKvnr8TICDZlmOpcDlxG80OWFfhXPOder:VgXgeXKvnrTFOqLoXXPOEr
TLSH
T10C06D000B7E54A12E1772B3C9DB2D3746639FCD0AA32C61A32C83D1B3D766A05A717E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
Session Guitarist - Picked Acoustic 1.1.0 Setup PC.exe

File Explorer

Session Guitarist - Picked Acoustic 1.1.0 Setup PC.exe

.exe 3.5MB

Session Guitarist - Picked Acoustic 1.1.0 Setup PC.exe

IMPHASH 2504766638fe11b4c0e06283c1d3235c
SHA256 a7cfaf4c0530fbf8c440b42427acd8c2cd043a6f08ae8fc15b89be9130fd8c73
MD5 84edab71707950b59f771b7b1aa4491e
SHA1 3e9f83f442fe0b46472fa2fb590fe013e64ac03f
SHA512 08a261b4243d2445ae018bb99db951ee41c832e9c10d1ea2c3f41b70c895aa07c8d50ee947f5cdedd693b90c00f7c70c035fbf9629b212aaa6d6147d32e1f688
SSDEEP 98304:VgXgekwnKvnr8TICDZlmOpcDlxG80OWFfhXPOder:VgXgeXKvnrTFOqLoXXPOEr
TLSH
T10C06D000B7E54A12E1772B3C9DB2D3746639FCD0AA32C61A32C83D1B3D766A05A717E5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

7a:b7:cc:31:30:51:ab:6d:51:dc:6a:3b:bd:7f:ab:0a:89:28:ec:b6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Chains

Sep 6, 2019

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Serial Number

08:2d:6d:22:d7:f8:e3:5f:84:af:0e:8e:9e:75:d7:98

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 9, 2018 - Oct 3, 2021

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

75069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

InitializeCriticalSection DeleteCriticalSection CloseHandle CreateThread WaitForSingleObject SetEvent ResetEvent WaitForMultipleObjects CompareStringA GetLastError WideCharToMultiByte MultiByteToWideChar CompareStringW lstrlenA LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW FormatMessageA LocalFree FormatMessageW SetFileAttributesA RemoveDirectoryA SetCurrentDirectoryA GetWindowsDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetShortPathNameW GetShortPathNameA GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA GetTempPathA GetTempFileNameA FindClose FindFirstFileA SetLastError FindFirstFileW FindNextFileA CreateFileA CreateFileW GetFileSize SetFilePointer ReadFile SetFileTime WriteFile SetEndOfFile CreateEventA EnterCriticalSection LeaveCriticalSection Sleep GetCommandLineW CreateProcessA GetExitCodeProcess IsBadReadPtr SetUnhandledExceptionFilter RaiseException GetSystemInfo VirtualProtect GetLocaleInfoA IsBadCodePtr GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetCPInfo GetOEMCP GetACP VirtualQuery InterlockedExchange RtlUnwind IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy TlsGetValue TlsSetValue TlsFree GetCurrentThreadId TlsAlloc GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle HeapSize GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA HeapFree HeapAlloc HeapReAlloc ExitProcess GetProcAddress TerminateProcess GetCurrentProcess

user32

PostMessageA ShowWindow DestroyWindow KillTimer SetTimer SetDlgItemTextA EndDialog IsDlgButtonChecked GetDlgItem MessageBoxW DialogBoxParamA GetDesktopWindow SetForegroundWindow GetWindowLongA SetWindowLongA SetWindowTextW GetWindowTextA GetWindowTextLengthA SetWindowTextA SendMessageA LoadStringW LoadStringA CharPrevA

oleaut32

VariantClear SysAllocString SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

Session Guitarist - Picked Acoustic 1.1.0 Setup PC.exe

comctl32

kernel32

user32

oleaut32

generic