TC-HELICON_GoXLR_v5[.]72[.]0_2024-12-13[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
TC-HELICON_GoXLR_v5.72.0_2024-12-13.zip
Size 6.1MB
Sample260813-wbfpcadj2v
SHA256 430c47a9658f5a0d6dd795191731084cefb58e2b0c3374bcaefc4ace5e6c13ad
MD5 b3735acecbee8a70a274d4c3969b165f
SHA1 91587625a6788fcc537e80f271abf642da6559d9
SHA512 96552aac8bf4ae99087d9bba3adcf3d3be36e425b8b99fb6e3ea462b11993032f791262439c90d6ec4a32a07eb3b40035059fad1f7a37abbb98ec39361ade965
SSDEEP 98304:kjIDnq5qSrnfU7a5gvv+GOZ1gcbZX8dtUg23QBXUPC7zuzTHtIM0xQMa:i5XrM7a+vmlb6dVWjzlMa
TLSH
T1385633ECDC80564369CBA9336352D90BEA2367C6E09CFAF896F1D1740107A725E72BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

TC-HELICON_GoXLR_v5.72.0_2024-12-13.zip

.zip 6.1MB
TC-HELICON_GoXLR_v5.72.0_2024-12-13_setup.exe

.exe 6.5MB

TC-HELICON_GoXLR_v5.72.0_2024-12-13.zip

SHA256 430c47a9658f5a0d6dd795191731084cefb58e2b0c3374bcaefc4ace5e6c13ad
MD5 b3735acecbee8a70a274d4c3969b165f
SHA1 91587625a6788fcc537e80f271abf642da6559d9
SHA512 96552aac8bf4ae99087d9bba3adcf3d3be36e425b8b99fb6e3ea462b11993032f791262439c90d6ec4a32a07eb3b40035059fad1f7a37abbb98ec39361ade965
SSDEEP 98304:kjIDnq5qSrnfU7a5gvv+GOZ1gcbZX8dtUg23QBXUPC7zuzTHtIM0xQMa:i5XrM7a+vmlb6dVWjzlMa
TLSH
T1385633ECDC80564369CBA9336352D90BEA2367C6E09CFAF896F1D1740107A725E72BD1
MD5 SHA1 SHA512 SSDEEP TLSH

TC-HELICON_GoXLR_v5.72.0_2024-12-13_setup.exe

IMPHASH bdf46c86f23e1539a29da7f0230f4a7b
SHA256 58a8fc99a634df60f7118d350eedb9c47184680513a9076ec39695e904f1bb8e
MD5 2252839ce1e876a814926457462ed3e7
SHA1 2e778e92ca550744e3418e5ebee1afa5432d06a9
SHA512 9e0d69dc34596d65521ba7de78f74d6de1cb7a5ec86ddbcc1b15b54f4b364653162db73736a8bf46fa462f8456421b113d51125e798e4eafb5c3cf388e19e680
SSDEEP 98304:xbcGN+/sfPDbkXy+791CrM5qJvaG4BAnVbfnLiOBBUIyFUBzQdsFP2xzjziuQ5wh:xdkXR7WrM4Jy69DzBzeNxrY+
TLSH
T1776623317DC5C03BE17301324A19E6A7A6BFF6620F26198BB79C6B7E4F249814F12647
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

85:6e:bc:b3:5d:86:fc:eb:49:41:b1:a5:d9:06:c6:2c:db:d0:f7:7e:ef:3d:ce:f7:35:b5:d0:b1:38:f2:b5:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=HRB 5898,CN=MUSIC Tribe Brands DE GmbH,O=MUSIC Tribe Brands DE GmbH,STREET=Otto-Brenner-Str. 4 a,L=Willich,ST=Nordrhein-Westfalen,C=DE,1.2.840.113549.1.9.1=#0c1a74686f6d61732e7a696e74406d7573696374726962652e636f6d,1.3.6.1.4.1.311.60.2.1.1=#13074b726566656c64,1.3.6.1.4.1.311.60.2.1.2=#13134e6f7264726865696e2d5765737466616c656e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 13, 2024

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

44:54:c5:44:a7:7c:b8:30:94:df:04:db

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 9, 2022 - Mar 28, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 7, 2023 - Dec 9, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

374281

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wrk\tlprj\_ToriLogic\Products\TL-SelfExtractor\_main\bin\ReleaseAsInvoker\Win32\tl-sfxstub.pdb

kernel32

GetSystemTimeAsFileTime QueryPerformanceCounter HeapFree GetLocaleInfoEx GetUserDefaultUILanguage LCIDToLocaleName HeapSize HeapReAlloc HeapAlloc HeapDestroy GetProcessHeap ReadFile WriteFile GetFileInformationByHandle MultiByteToWideChar WideCharToMultiByte SetLastError SetFileTime GetModuleHandleA SetFilePointer SetEndOfFile GetFileSize GetProcessAffinityMask GlobalMemoryStatus IsProcessorFeaturePresent GetVersion ReleaseSemaphore CreateEventW SetEvent ResetEvent CreateSemaphoreW QueryPerformanceFrequency LockResource RaiseException FindResourceExW LoadResource MulDiv GetCommandLineW GetLongPathNameW FindResourceW lstrcmpiW SetStdHandle SetEnvironmentVariableW GetExitCodeProcess GetOEMCP GetACP IsValidCodePage GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetFileType ReadConsoleW SetFilePointerEx ExitProcess GetTimeZoneInformation GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind GetStartupInfoW SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive TerminateProcess UnhandledExceptionFilter WriteConsoleW LoadLibraryExA FlushInstructionCache InterlockedPushEntrySList SizeofResource SetUnhandledExceptionFilter LoadLibraryExW GetEnvironmentStringsW VerifyVersionInfoW FreeLibrary GetModuleHandleW CreateProcessW GetCurrentProcessId VerSetConditionMask LocalFree GetProcAddress GetCurrentDirectoryW LoadLibraryW GetSystemInfo GetNativeSystemInfo CloseHandle DeleteFileW GetConsoleMode Sleep SetFileAttributesW ResumeThread FreeEnvironmentStringsW GetCurrentThreadId GetFileAttributesW CreateFileW WaitForSingleObject FindClose GetTempPathW GetModuleFileNameW RemoveDirectoryW VirtualAlloc OutputDebugStringA GetStdHandle GetCurrentProcess FindNextFileW VirtualFree GetFileSizeEx FindFirstFileW CreateDirectoryW GetTickCount DeleteCriticalSection DecodePointer GetLastError InitializeCriticalSectionEx InitializeCriticalSection LeaveCriticalSection ExpandEnvironmentStringsW InterlockedPopEntrySList InitializeSListHead OutputDebugStringW IsDebuggerPresent GetCPInfo CompareStringEx GetStringTypeW LCMapStringEx EncodePointer FormatMessageA AreFileApisANSI GetFullPathNameW FindFirstFileExW GetCommandLineA EnterCriticalSection

user32

GetDlgItem SetWindowLongW KillTimer PostQuitMessage DialogBoxParamW InvalidateRect GetWindowTextW SendMessageW CharUpperW UnregisterClassW GetWindowTextLengthW TranslateMessage CharNextW SendInput RegisterClassExW LoadStringW GetWindow DestroyWindow MonitorFromWindow CreateWindowExW EndDialog SetWindowTextW IsWindow GetMonitorInfoW GetClientRect GetParent EnableWindow MessageBoxW GetWindowLongW GetMessageW CreateDialogParamW PostMessageW GetWindowRect IsWindowVisible SetWindowPos GetActiveWindow ShowWindow DispatchMessageW SetTimer RedrawWindow PeekMessageW MapWindowPoints DefWindowProcW

advapi32

CheckTokenMembership RegQueryInfoKeyW CreateWellKnownSid RegQueryValueExW DuplicateToken RegCloseKey RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW

shell32

CommandLineToArgvW SHGetKnownFolderPath ShellExecuteExW SHGetSpecialFolderPathW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW SHParseDisplayName

ole32

CoCreateInstance CoTaskMemFree StringFromGUID2 CoUninitialize OleUninitialize OleInitialize CoTaskMemRealloc CoTaskMemAlloc CoCreateGuid CoInitialize

oleaut32

SysStringLen VarUI4FromStr SysAllocStringLen VariantClear

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

TC-HELICON_GoXLR_v5.72.0_2024-12-13.zip

TC-HELICON_GoXLR_v5.72.0_2024-12-13_setup.exe

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

generic