Ableton Live 12 Suite Installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Ableton Live 12 Suite Installer.exe
Size 33.0MB
Sample260804-bkcntstsdz
SHA256 f8f24a9a0a99fe59850b733d5ea19b413170d2ea55668b26f445afba1aba3e40
MD5 a226b891f561d123995f23e1bf60b51f
SHA1 ae93e547e4a756e5b108b1bdf72e33206ea093e0
SHA512 df5d13a02cba20c24e3091bce96e07795dea9d2c51fe2cd059c04d13a83dab434d0d52a696e650a6e0823d8ed0fde7adf4168dc50a29ed5aefabf53833d3e8cc
SSDEEP 786432:wQVwRlCfMj9/gVww+KXHDKdfDF+uY0sd6Z4zIv558s:FVwRlC0j9oVwzgUY0sdpUR58s
TLSH
T1AE773322AB957427C2FF0933A97885202A26FD18235C856796C7ECDCB7343C567BB2D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Ableton Live 12 Suite Installer.exe

.exe 33.0MB

Ableton Live 12 Suite Installer.exe

IMPHASH f3015e9f3617481b601222cb4981b401
SHA256 f8f24a9a0a99fe59850b733d5ea19b413170d2ea55668b26f445afba1aba3e40
MD5 a226b891f561d123995f23e1bf60b51f
SHA1 ae93e547e4a756e5b108b1bdf72e33206ea093e0
SHA512 df5d13a02cba20c24e3091bce96e07795dea9d2c51fe2cd059c04d13a83dab434d0d52a696e650a6e0823d8ed0fde7adf4168dc50a29ed5aefabf53833d3e8cc
SSDEEP 786432:wQVwRlCfMj9/gVww+KXHDKdfDF+uY0sd6Z4zIv558s:FVwRlC0j9oVwzgUY0sdpUR58s
TLSH
T1AE773322AB957427C2FF0933A97885202A26FD18235C856796C7ECDCB7343C567BB2D4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

52:f8:93:39:e4:2b:d0:6e:fb:42:7f:7c:c5:40:04:50:f0:e5:a6:2d:87:c2:43:ac:43:38:20:12:6f:27:e1:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=HRB 72838,CN=Ableton AG,OU=IT OPS,O=Ableton AG,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Chains

Sep 26, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

07:74:8f:f7:54:3c:c1:11:68:f9:51:99:42:fb:05:84

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 3, 2023 - Jun 16, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

296528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

D:\a\wix\wix\build\burn\Release\x86\burn.pdb

kernel32

InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseMutex CreateEventW CreateSemaphoreW GetCurrentProcess CreateThread GetNativeSystemInfo CompareStringW VerSetConditionMask GetSystemTime GetComputerNameW VerifyVersionInfoW GetDateFormatW GetUserDefaultUILanguage GetUserDefaultLangID GetSystemDefaultLangID GetStringTypeW CreateProcessW DuplicateHandle ProcessIdToSessionId ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW OpenProcess GetProcessId SetProcessShutdownParameters LocalFileTimeToFileTime GetExitCodeThread DosDateTimeToFileTime CompareStringA SetThreadExecutionState ReleaseSemaphore CreateMutexW GetExitCodeProcess CreateFileMappingW MapViewOfFile UnmapViewOfFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW FreeLibrary RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer GetStdHandle GetModuleHandleExW GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer WriteConsoleW VirtualQuery VirtualProtect GetSystemInfo RaiseException ExpandEnvironmentStringsW GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc GetModuleFileNameW GetSystemWow64DirectoryW GetSystemDirectoryW GetLocalTime SetLastError GetTempPathW GetVolumePathNameW GetTempFileNameW GetFullPathNameW CopyFileW GlobalFree GlobalAlloc Sleep SetFileTime SetFilePointerEx SetEndOfFile ReadFile LoadLibraryExA GetFileSizeEx LCMapStringW WideCharToMultiByte MultiByteToWideChar lstrlenW FormatMessageW LocalFree MoveFileExW SetFileAttributesW RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateDirectoryW GetCurrentDirectoryW LoadLibraryExW GetProcAddress GetModuleHandleW WaitForMultipleObjects WaitForSingleObject HeapSetInformation GetLastError lstrlenA GetCurrentProcessId GetModuleHandleA MulDiv CompareStringOrdinal GetSystemWindowsDirectoryW LoadResource LockResource SizeofResource FindResourceExA VirtualAlloc VirtualFree SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GetTimeZoneInformation WriteFile SetFilePointer CreateFileA ExitProcess CloseHandle CreateFileW

user32

GetDC ReleaseDC MonitorFromPoint ShowWindow IsDialogMessageW LoadBitmapW SetWindowLongW GetWindowLongW GetCursorPos MessageBoxW SetWindowPos CreateWindowExW UnregisterClassW RegisterClassW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW WaitForInputIdle IsWindow PostMessageW GetMonitorInfoW LoadCursorW MonitorFromWindow

gdi32

DeleteObject SelectObject StretchBlt GetObjectW DeleteDC CreateDCW CreateCompatibleDC GetDeviceCaps

advapi32

GetUserNameW CryptAcquireContextW CryptReleaseContext QueryServiceConfigW CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash OpenProcessToken AllocateAndInitializeSid CheckTokenMembership GetTokenInformation AdjustTokenPrivileges IsWellKnownSid LookupPrivilegeValueW RegCreateKeyExW QueryServiceStatus OpenServiceW OpenSCManagerW ControlService CloseServiceHandle ChangeServiceConfigW SetEntriesInAclW DecryptFileW InitializeAcl CreateWellKnownSid ConvertStringSecurityDescriptorToSecurityDescriptorW ReportEventW OpenEventLogW CloseEventLog RegQueryInfoKeyW RegDeleteValueW RegQueryValueExW InitiateSystemShutdownExW RegOpenKeyExW RegCloseKey SetNamedSecurityInfoW RegDeleteKeyW RegEnumKeyExW RegEnumValueW RegSetValueExW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetEntriesInAclA

ole32

CoInitializeEx CoInitialize CoInitializeSecurity CoUninitialize CLSIDFromProgID CoTaskMemFree StringFromGUID2 CoCreateInstance

oleaut32

VariantClear SysFreeString VariantInit SysAllocString

rpcrt4

UuidCreate

shell32

CommandLineToArgvW ShellExecuteExW SHGetFolderPathW

Name

.text

Size

433KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

184KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Ableton Live 12 Suite Installer.exe

kernel32

user32

gdi32

advapi32

ole32

oleaut32

rpcrt4

shell32

generic