VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
- SHA256 ebcaf56dfc29f499ba5aa3bb8659e16127e96fa9ea51950ecb042498038672b6
Password
taiwebs.com
Behavioral task
behavioral1
Sample
Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
21 signatures
150 seconds
General
- Target VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
- Size 42.5MB
- Sample260810-ha293ashka
- SHA256 ebcaf56dfc29f499ba5aa3bb8659e16127e96fa9ea51950ecb042498038672b6
- MD5 1e26e68884030491880f4224568662c2
- SHA1 29f090ad6623086cd7321567aae425bdde668532
- SHA512 dcd40b5e4bbc9866385d0952b3836279b5e07b118dc955dd544a42cf98a7a029c49d995a055fcd6d003a26af9bf10ca1ff93fcf0108b20581d02e70d0c12442d
- SSDEEP 786432:SfNeoyjaUZtWTpM5a+DBF8pZVJYoudREPRsJVRtzxgZTGpRbjr4Ux7MqrMqQ:SFX+BEpTZNudR7V7xgZT+RbvnMUI
- TLSH T107A733823F8903CD3C3CDCB56296BC1B18D94E1D4946A6BEA160FC7164E2DEEE6493C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe ConfuserEx static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll ConfuserEx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe unpack001/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe innosetup
File Explorer
-
VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar.rar 42.5MB
-
Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe.exe 2.7MB
-
Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll.dll 22.4MB
-
Voicemod Pro v1.2.6.8 (x64)/Readme.txt767B
-
Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe.exe 22.2MB
Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe
- SHA256 2a4176466f2a9cb6edfb74f04ecc737672363876b7df6b06fe5132533eaf0d05
- MD5 237551f6b806666f9c0c3f5669380195
- SHA1 5a7aa3c8460e1be4e4cd3d244a59b285a8dcdda6
- SHA512 87eaa33d93513f217d754acde0191ae0c7b73a9443602e8cbb44da09e66a33a19bcbb8a503fce7a08ed15174afe5f1dc708896fb415fca174a721b22bf969f69
- SSDEEP 49152:/3bKUlADq0GArjFFLqIHaLafIXYXpdwbSC:eUToFFL5HHfWwpdweC
- TLSH T188D5AD0137A0C908E46A1E768D30C5EC5332BC0AEF65E64F75DA3B6F2ABA7814D11767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Password
taiwebs.com
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll
- SHA256 7e936df694ae0dcddf6ba8a154f88ec6b9c44a782322757112d594df2ebb3962
- MD5 387497039e5dd83a0d599df223b3a4f7
- SHA1 b3e42f1aa6eb776eeb42e398797e6ef7cdff257f
- SHA512 69604fe4ce014aaeefa310111b7cd7d424cf11537b080cfb6733ff43a53c66b32e662a4b73218d05b6e364900363a7145cea7f2bf1db4a7202a28e01ff781e21
- SSDEEP 393216:8m8S+7v/NOmhOM88xlLJApEC5L9Ln57Svnesezx5I+W0Y65NTBjAcs:8vv/Yme8xdCS2L9j5753KL095Nm
- TLSH T1F8372257F5849CAAD0A1507040E72E71BAB078AD833393D7C7A8567A7D337A00EB93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Password
taiwebs.com
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
22.4MB
Virtual Size
22.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Voicemod Pro v1.2.6.8 (x64)/Readme.txt
- SHA256 9b28a2e6ba7487dc60eff0830e14cb2acef4bccec5fd862fe887ab090ffc2aa7
- MD5 0bd66aa6b6af01652f1a1a00148b6c98
- SHA1 846b6b12f1025694f5796687a61e0e4ca819f958
- SHA512 0d61a96b65f098b7d08d684696db711eb1f641fe58cb598cecb1f36cd4d6ac48894c88f59682d1edc2cf479d06838268a0cdb7ad113ad9bc86e5f931b2d6120f
- TLSH T19F01DD9E7D32D3200922D30C70095168F717F968A281889570AFD0A136D57B5F5FC1CC
- MD5 SHA1 SHA512 TLSH
Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe
- SHA256 afd7452c34570e409fc0c2bc8a22fb7429a3cc8f48e85fe6a154656ec020330d
- MD5 2c74a59f3a312c9003e3bdf2f458c87f
- SHA1 97b1ede9c186ea36a74bceb1bf5e5689aad99086
- SHA512 b5e8810733694aa773c4c3b8a4063e5fddd962b64d2ad697223ddeb7337f09e8c21fc1efdb2c13c854f2e6884940fac217338e0839fd21d2b4db3c2da031a392
- SSDEEP 393216:D2MvvQScyvXuaXVTwkBgoEMNBrDXLuzLYzCdcv8p5UPxaMQlBf4PrE:SMvVcysoEcLuzLig5p5UPxtyAP4
- TLSH T13037339EAD1202F1ED31F6384C4866A61B7BB2ED3B2C5C12A57D47E19B34C736487638
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
taiwebs.com
Digest
d9:27:08:7d:9e:d2:7e:44:aa:df:1a:c3:39:fc:2e:f8:e2:95:47:f9:0d:82:c5:43:ce:6d:5a:b4:de:dd:be:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
Chains
Jan 30, 2020
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
Serial Number
02:c5:37:21:70:da:a8:25:b5:e2:4b:61:42:68:c5:b5
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 13, 2019 - Dec 17, 2020
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
1
Entry point
43728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ