Auto-Tune_Pro_v9[.]1[.]1_Windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Auto-Tune_Pro_v9.1.1_Windows.exe
Size 153.9MB
Sample260909-g7e1csszds
SHA256 ae1f7834a467b9bcb349f80caa678416dd2a63c191a1dd3d7c51255d5a45e924
MD5 6bb05871158f7836f32a0b2ac6a1079a
SHA1 7d2a6d61b910d4cf954952cc5653c63b4d97b787
SHA512 99a194c66442f681f184153e092335d27b4e030e270cd77cdfbe191646c8bb14da47ed5e80f2dfdc6b3efcb0b30985214911d42423a41ab62c71f3491b455c38
SSDEEP 3145728:LK/1cEpetTHYmB3c7ZOIDmikRQwAv95DlMcI3J5KJYSo8L8P2XTiY0JXFHd:aaTHYF5n0VAHDaJAJw8A2XR05n
TLSH
T1FC78332395A0412EC9F286351E5F6CF1514ABC3F6F24915AB214FE182DF0A91F973B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Auto-Tune_Pro_v9.1.1_Windows.exe

.exe 153.9MB

Auto-Tune_Pro_v9.1.1_Windows.exe

IMPHASH 388c8c577731896ca928024580ab4b19
SHA256 ae1f7834a467b9bcb349f80caa678416dd2a63c191a1dd3d7c51255d5a45e924
MD5 6bb05871158f7836f32a0b2ac6a1079a
SHA1 7d2a6d61b910d4cf954952cc5653c63b4d97b787
SHA512 99a194c66442f681f184153e092335d27b4e030e270cd77cdfbe191646c8bb14da47ed5e80f2dfdc6b3efcb0b30985214911d42423a41ab62c71f3491b455c38
SSDEEP 3145728:LK/1cEpetTHYmB3c7ZOIDmikRQwAv95DlMcI3J5KJYSo8L8P2XTiY0JXFHd:aaTHYF5n0VAHDaJAJw8A2XR05n
TLSH
T1FC78332395A0412EC9F286351E5F6CF1514ABC3F6F24915AB214FE182DF0A91F973B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

0d:16:dd:0e:ce:fe:f6:30:cc:c7:68:db:e3:ee:44:0f:54:c1:1b:08:bd:01:23:93:1f:51:dc:4a:68:ae:0d:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Antares Audio Technologies\, LLC,OU=Antares Audio Technologies,O=Antares Audio Technologies\, LLC,L=Scotts Valley,ST=California,C=US

Chains

Nov 24, 2020

CN=Antares Audio Technologies\, LLC,OU=Antares Audio Technologies,O=Antares Audio Technologies\, LLC,L=Scotts Valley,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Antares Audio Technologies\, LLC,OU=Antares Audio Technologies,O=Antares Audio Technologies\, LLC,L=Scotts Valley,ST=California,C=US

Serial Number

07:fe:3e:de:7d:57:32:9e:19:78:0b:fc:72:53:52:6f

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 20, 2020 - May 24, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

286202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

comctl32

ord17

kernel32

LoadLibraryW lstrcmpW lstrcmpiW GetSystemDefaultLangID GetUserDefaultLangID VerLanguageNameW CompareFileTime CreateDirectoryW FindClose FindFirstFileW FindNextFileW SetFileAttributesW GetSystemTimeAsFileTime GetPrivateProfileStringW MoveFileW LocalFree FormatMessageW GetSystemInfo MulDiv RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection LoadLibraryExW GetVersion GetLocalTime IsValidLocale GetCommandLineW GetFileAttributesW GlobalAlloc GlobalFree FlushFileBuffers VirtualQuery IsBadReadPtr GetDiskFreeSpaceExW GetDriveTypeW GetExitCodeProcess GetCurrentThread GetLocaleInfoW InterlockedExchange LoadLibraryExA GetModuleHandleW GetProcAddress GetSystemDirectoryA LoadLibraryA GetLastError SetLastError CreateFileW GetFileSize CloseHandle CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrlenA MultiByteToWideChar WideCharToMultiByte ReadFile SetFilePointer WriteFile HeapAlloc lstrcmpA SystemTimeToFileTime ResetEvent SetEvent FindResourceExW SetFileTime OpenProcess GetProcessTimes ReadConsoleW WriteConsoleW SetStdHandle GetCurrentDirectoryW SetFilePointerEx GetConsoleMode GetConsoleCP GetTimeFormatW GetDateFormatW OutputDebugStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetFileType HeapReAlloc GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW FreeLibrary CompareStringA CompareStringW lstrcatW GetVersionExW InterlockedDecrement InterlockedIncrement CreateEventW QueryPerformanceFrequency GetTempFileNameW CopyFileW GetTickCount GetExitCodeThread CreateThread FindResourceW GlobalUnlock GlobalLock SizeofResource LockResource LoadResource lstrcpyW SetErrorMode GetTempPathW ExpandEnvironmentStringsW MoveFileExW WriteProcessMemory VirtualProtectEx GetWindowsDirectoryW GetSystemDirectoryW FlushInstructionCache SetThreadContext GetThreadContext CreateProcessW ResumeThread TerminateProcess ExitProcess GetCurrentProcess Sleep WaitForSingleObject DuplicateHandle RemoveDirectoryW DeleteFileW SetCurrentDirectoryW lstrlenW lstrcpynW GetModuleFileNameW GetProcessHeap HeapFree GetCPInfo GetOEMCP GetACP IsValidCodePage GetCurrentThreadId HeapSize GetModuleHandleExW GetStdHandle GetFullPathNameW IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind LCMapStringW DecodePointer EncodePointer

user32

PostMessageW DispatchMessageW TranslateMessage GetMessageW DefWindowProcW PostQuitMessage RegisterClassW CharPrevW SendDlgItemMessageW wvsprintfW LoadImageW CreateDialogParamW MoveWindow SetCursor GetWindow GetDlgItemTextW SetFocus EnableWindow SetForegroundWindow SetActiveWindow SetDlgItemTextW IsDialogMessageW FindWindowW SubtractRect IntersectRect SetRect FillRect GetSysColorBrush GetSysColor GetWindowRect GetDC GetSystemMetrics GetDlgCtrlID CreateDialogIndirectParamW DestroyWindow IsWindow SendMessageW MessageBoxW CharNextW WaitForInputIdle SetWindowLongW GetWindowLongW GetClientRect EndPaint BeginPaint ReleaseDC GetWindowDC SetWindowPos SetWindowTextW GetDlgItem ExitWindowsEx CharUpperW EndDialog DialogBoxIndirectParamW ShowWindow GetDesktopWindow MsgWaitForMultipleObjects PeekMessageW wsprintfW LoadIconW LoadCursorW KillTimer SetTimer CreateWindowExW

gdi32

TranslateCharsetInfo UnrealizeObject CreateHalftonePalette GetDIBColorTable SelectPalette RealizePalette GetSystemPaletteEntries CreatePalette CreateFontW GetObjectW SetTextColor SetBkMode GetDeviceCaps CreateSolidBrush CreateFontIndirectW SetStretchBltMode StretchBlt SelectObject DeleteDC CreateDIBitmap CreateCompatibleDC BitBlt DeleteObject GetStockObject

advapi32

GetTokenInformation RegOpenKeyExW RegOpenKeyW RegOverridePredefKey LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey FreeSid EqualSid AllocateAndInitializeSid OpenThreadToken OpenProcessToken SetEntriesInAclW SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateWellKnownSid RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyW RegSetValueExW RegEnumValueW RegCreateKeyExW RegDeleteValueW RegQueryValueExW

shell32

SHGetMalloc SHGetPathFromIDListW SHGetFolderPathW SHBrowseForFolderW ShellExecuteW CommandLineToArgvW ShellExecuteExW

ole32

CoCreateInstance CoCreateGuid CLSIDFromProgID CoTaskMemAlloc CoTaskMemRealloc CoInitialize CoInitializeSecurity CoUninitialize CoTaskMemFree

oleaut32

UnRegisterTypeLi RegisterTypeLi LoadTypeLi SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen SysAllocString SysStringByteLen SysAllocStringByteLen VarBstrCat VarBstrFromDate VariantClear VariantChangeType GetErrorInfo VarUI4FromStr SystemTimeToVariantTime

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW UuidCreate UuidToStringW

Sharing

General

Malware Config

Signatures

File Explorer

Auto-Tune_Pro_v9.1.1_Windows.exe

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

rpcrt4

generic