mixing-station-pc-windows-3[.]1[.]3_763[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
mixing-station-pc-windows-3.1.3_763.exe
Size 81.4MB
Sample260818-27ls5atzcs
SHA256 86f5404c3334ed6266c3f67bcd5df334b8621a5715af1003aa0c1a8c0466adeb
MD5 d59bb0e54be1d72883d7573372368830
SHA1 fa4f4da353a2cc1ae61e715230e3468387eafbae
SHA512 9aa233e20365b975d6a6a096818507a92403e1c9a1cd42b6e57418fb03502fdfcec267761f1111115eb2a33d153dbacaf5ff74c7fb59959346803a3ab3bcb23f
SSDEEP 1572864:LIDyi9kBoKBhNqCE6nB1bAPkO/XKK09mKEVjJygZdjQxLzJs7eN:LIX+BoChBE4B12XKrtEZJRZdjQk7G
TLSH
T17918333E6C59CA2FD36259344491512E97713CE34627F6A3A28CB67D1A32EBC672C730
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mixing-station-pc-windows-3.1.3_763.exe

File Explorer

mixing-station-pc-windows-3.1.3_763.exe

.exe 81.4MB

mixing-station-pc-windows-3.1.3_763.exe

IMPHASH e7f25102dfaaa743c572f7de56388bdf
SHA256 86f5404c3334ed6266c3f67bcd5df334b8621a5715af1003aa0c1a8c0466adeb
MD5 d59bb0e54be1d72883d7573372368830
SHA1 fa4f4da353a2cc1ae61e715230e3468387eafbae
SHA512 9aa233e20365b975d6a6a096818507a92403e1c9a1cd42b6e57418fb03502fdfcec267761f1111115eb2a33d153dbacaf5ff74c7fb59959346803a3ab3bcb23f
SSDEEP 1572864:LIDyi9kBoKBhNqCE6nB1bAPkO/XKK09mKEVjJygZdjQxLzJs7eN:LIX+BoChBE4B12XKrtEZJRZdjQk7G
TLSH
T17918333E6C59CA2FD36259344491512E97713CE34627F6A3A28CB67D1A32EBC672C730
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

242816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msiwrapper.exe.pdb

msi

ord145 ord64 ord34 ord103 ord32 ord74 ord118 ord190 ord88 ord70 ord169 ord137 ord141 ord8 ord120 ord123 ord115 ord116 ord125 ord121 ord17 ord92 ord158 ord163 ord160 ord159 ord49

ole32

CoCreateGuid StringFromGUID2 IIDFromString

shell32

CommandLineToArgvW

shlwapi

PathIsDirectoryEmptyW

user32

MessageBoxW

kernel32

SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc GetCurrentDirectoryW ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess ResumeThread CreateProcessW GetProcessId AssignProcessToJobObject GetCurrentThreadId OpenMutexW LoadLibraryExW GetCurrentProcessId GetLocalTime LoadResource LockResource SizeofResource FindResourceW AllocConsole AttachConsole FreeLibrary GetModuleHandleExW GetProcAddress LoadLibraryW LocalFree FormatMessageW CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetShortPathNameW RemoveDirectoryW SetFileAttributesW SetLastError GetTickCount CopyFileW MoveFileExW GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW GetTempPathW GetSystemDirectoryW GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte RtlUnwind GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FlsGetValue RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetFullPathNameW GetDriveTypeW ExitProcess GetStdHandle WriteFile HeapAlloc HeapFree GetFileType FlsAlloc

Name

.text

Size

399KB

Virtual Size

399KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

80.9MB

Virtual Size

80.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

mixing-station-pc-windows-3.1.3_763.exe

msi

ole32

shell32

shlwapi

user32

kernel32

generic