Patcher and Keygen.zip
- SHA256 e357330974540168d23a21228ad6827ce68b8096139782dbf7524ea6961bb329
Behavioral task
behavioral1
Sample
Patcher and Keygen/ABLETON PATCHER.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
Patcher and Keygen/ABLETON PATCHER.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
24 signatures
150 seconds
Behavioral task
behavioral3
Sample
Patcher and Keygen/Ableton Keygen v2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
27 signatures
150 seconds
Behavioral task
behavioral4
Sample
Patcher and Keygen/Ableton Keygen v2.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
24 signatures
150 seconds
Behavioral task
behavioral5
Sample
Patcher and Keygen/keygen info.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Patcher and Keygen/keygen info.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Patcher and Keygen.zip
- Size 26.0MB
- Sample260802-dv62jasvav
- SHA256 e357330974540168d23a21228ad6827ce68b8096139782dbf7524ea6961bb329
- MD5 e0629a14b758f1d6afc1a0872d5416ac
- SHA1 b47ebb7ca6abf72d819e206f3ede916d19c960c7
- SHA512 ae7f63d902b340fa5d7085f6f2e69502b56889877e5c8c04788321711a07e27006874d260757a7411f7b21d559e1b8e1c72c64ed6d43a9bf3d1ec841d7211643
- SSDEEP 786432:CBzRjKwp8TYUkF6DzkBYrYZ0bB0zPKGjwuTlygaSc0eA:ERjKW83D4BYMaB07Kxclrnc0eA
- TLSH T1F85733036F590C9ED449744180945AD4A73ACFBC6A9C7524EBB1779E0D8BB6C223F8EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 2 IoCs
resource yara_rule static1/unpack001/Patcher and Keygen/ABLETON PATCHER.exe pyinstaller static1/unpack001/Patcher and Keygen/Ableton Keygen v2.exe pyinstaller - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Patcher and Keygen/ABLETON PATCHER.exe unpack001/Patcher and Keygen/Ableton Keygen v2.exe
File Explorer
-
Patcher and Keygen.zip.zip 26.0MB
-
Patcher and Keygen/ABLETON PATCHER.exe.exe 13.4MB
-
sys_core_a6028b87.pyc4.5MB
-
Patcher and Keygen/AUDIOWAREZ.nfo3KB
-
Patcher and Keygen/Ableton Keygen v2.exe.exe 13.5MB
-
sys_core_40802e01.pyc2.6MB
-
Patcher and Keygen/keygen info.txt387B
Patcher and Keygen/ABLETON PATCHER.exe
- IMPHASH cf72283be50852e418ce6bbb6b645835
- SHA256 e60ed0a8bbffeb9b584c0746e451629f3e4e1a44b05f145c8e52f6c86a49ad62
- MD5 61ed48c7d0e38d8e1de4b8daef17ef9d
- SHA1 c43201e978a769831ab1676c79024d4e105cf621
- SHA512 c727d1f04563c492eda1d808a8f80047809b68682da89c0983c54e17a89575798a16ff8de5d4c0008e5ab6e0d392210c51ff7b01a29319a66a18be7d4e060743
- SSDEEP 393216:VvUNM85vziqdq1NsdQJluIF3MnG3Vdl5VnP/vYP4H8YH:Vch5vziQiWdQt3MGTVPY4x
- TLSH T1DFE6232FDAF1BC9DE6274A3CB0538D30D2F79E1C0DC530A1DF925251687BAA83D2A855
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
57632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
GetEnvironmentStringsW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
SetDllDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=158, id=1, productName=Unmarked objects,
count=29, id=260, version=36246,
count=1, id=258, version=36246,
sys_core_a6028b87.pyc
- SHA256 3c605876a95c9ca24c0702c738154a17276247cfb1a968fb55c45cde617ee0b9
- MD5 cd1fdd42dae83de4daad873d7cad512d
- SHA1 96b4004a88e5c04bc36f5f7fc3bc67c7cc529bb0
- SHA512 16e11954bee49a4f3318c1f4ab0714f004452b94f0421ded732d765e72246f8f6aa0a944576c59e6b222536e38596c5fece4e37fb4690c0c628b908a52abdd17
- SSDEEP 24576:deShi/CrYRk/P8BhdAB1bN6/3NPPgfGbhj2goIEI+nxrDnzcL7lwPNBhWdk3HEWx:ccimwZA9z87luHX
- TLSH T1F2265A77010B7CCE7B680EE15424B1641CAE35273356C1D9BFCCA9BF68F8099AD256B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Patcher and Keygen/AUDIOWAREZ.nfo
- SHA256 6f0b913dbe669a2b1ec3c7b4e884097f9e7670b69d6dcf5feb727c2f375abad8
- MD5 4336691c942ffde698ab91a047686097
- SHA1 362e718f01d264bf3f46f2498459be08be4a5ef4
- SHA512 0ca592de3aca1b5fa8aabbb746ee539f76d02393bc00f203f1e5e4424088ee0b30f6ce695c3ea1563bafa3b3266c6cc96915cea06e7d6db47e638b7803bae01f
- TLSH T16771002647CB227303F0D35295704BB2FB36943BE6A26E5C344D81B583A7A7582AD93D
- MD5 SHA1 SHA512 TLSH
Patcher and Keygen/Ableton Keygen v2.exe
- IMPHASH cf72283be50852e418ce6bbb6b645835
- SHA256 621cd6dee50365f3caaf73f62f22ecad840d956874618b10d42cb9a5de76d7f6
- MD5 50f29beb5694a8f8865a1dcb16eebe8e
- SHA1 a117af4c67fc30cb170683e471408d094116598d
- SHA512 28f0d2d49f400af000bd91bcbf9d56971be2ea4ba832a6cf0071209e79fcc6277a585a61f41ebe4c219206c543310785b3a5bd37f4a14f06ea142bda5a9096e6
- SSDEEP 393216:eGG85vziqdqNVdQJluIF3MnG3Vdl5VnP/vYP4H8YH:eGx5vziQiVdQt3MGTVPY4x
- TLSH T1FEE6232FDAF0BC9DE6334A3CB0538D30D2F79E180DC570A1DF925251687BAA83D6A855
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
57632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
GetEnvironmentStringsW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
SetDllDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=158, id=1, productName=Unmarked objects,
count=29, id=260, version=36246,
count=1, id=258, version=36246,
sys_core_40802e01.pyc
- SHA256 7ec808432950042496021ead44fd6c80f5e04011f7080a327ce1386c6718abf1
- MD5 d8d3e1176d60025a48852264912139f7
- SHA1 69f0bee41a3d346ec3c698a2a29f475d5c411e84
- SHA512 9fa29efcef7e18e116ee520c3953d90d2f796228817f8d06ec1896df814d2f9b8efe5b87248fe709bd847bc4d245f42dbfa43dd03645d00de605ad1dd51f9b64
- SSDEEP 24576:vPWME/Kusj0cSqAh9aqFnzxV+YkTdlfvljIqeK85UEtEjX75odQjbIEmPV424xSw:vP3ustSdaqDV+YkTjvRIoEOXGSH
- TLSH T1FAC5AE754A23BCBEE77C2DF09401AEC91E1C35433654D509AEC5B0BA6BB9636CE085EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Patcher and Keygen/keygen info.txt
- SHA256 f35f2f44b2bad3aa842d0962b3c9859939892c29986d86d016f08508ed343d2e
- MD5 fef9330d7fbf5d72d8cd1819718b341d
- SHA1 36e4383c16922e31106f4b4710099003f9cb4342
- SHA512 aafbefd923bc03402bdce6e1e5ca22cac214279e557cf7907e9b26fcf8bffb8919622677ceabcbb933e5201bfcbc6961c18aa8b4914cd944f7accdcb3d9f1c87
- TLSH T113E06137D37ED17754B423B3FC24AD41F728450C37651C11385BC0491A110A5076C27E
- MD5 SHA1 SHA512 TLSH