Kontakt 7 7[.]3[.]2 Setup PC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Kontakt 7 7.3.2 Setup PC.exe
Size 498.9MB
Sample260930-3z2eaada39
SHA256 9e1f597c269a45930dedc09a02aad85e0a8747f14b2a08e5858eeba7f54fc5f6
MD5 7c0ebfd7019d7887e3bd129faf37cf77
SHA1 2ce0c6363eb48eae3f5fd6afc2e47414a4547441
SHA512 3ef481d4b2122ba34c6075c6e1400fc13783f15aacae84d73a5715e79224e11a744b9ffc599f2515eef47a455e0f17cc7dc70843039005f6c95b6a19e4691b28
SSDEEP 12582912:EsNzSjq4q9qWurQpRiQDQ4dwFJnDdppbb6JViT0Mt1dt:EsNzSjq4DrQ6QDQ4dCd6fi/
TLSH
T1014933436BE8AD27D031293C9CE2E3343839ECC1A4B1A61671C5BD9B7F72150A2B67D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
Kontakt 7 7.3.2 Setup PC.exe

File Explorer

Kontakt 7 7.3.2 Setup PC.exe

.exe 498.9MB

Kontakt 7 7.3.2 Setup PC.exe

IMPHASH 2504766638fe11b4c0e06283c1d3235c
SHA256 9e1f597c269a45930dedc09a02aad85e0a8747f14b2a08e5858eeba7f54fc5f6
MD5 7c0ebfd7019d7887e3bd129faf37cf77
SHA1 2ce0c6363eb48eae3f5fd6afc2e47414a4547441
SHA512 3ef481d4b2122ba34c6075c6e1400fc13783f15aacae84d73a5715e79224e11a744b9ffc599f2515eef47a455e0f17cc7dc70843039005f6c95b6a19e4691b28
SSDEEP 12582912:EsNzSjq4q9qWurQpRiQDQ4dwFJnDdppbb6JViT0Mt1dt:EsNzSjq4DrQ6QDQ4dCd6fi/
TLSH
T1014933436BE8AD27D031293C9CE2E3343839ECC1A4B1A61671C5BD9B7F72150A2B67D5
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

25:ce:62:83:fb:5a:f8:38:e4:14:31:7c:bf:e1:d0:26:d7:bc:a8:0d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Chains

May 22, 2023

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Serial Number

04:92:1e:31:af:15:9e:dc:94:1a:a6:59:57:55:b6:84

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2021 - Oct 2, 2024

Minor OS version

Major OS version

Entry point

75069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

InitializeCriticalSection DeleteCriticalSection CloseHandle CreateThread WaitForSingleObject SetEvent ResetEvent WaitForMultipleObjects CompareStringA GetLastError WideCharToMultiByte MultiByteToWideChar CompareStringW lstrlenA LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW FormatMessageA LocalFree FormatMessageW SetFileAttributesA RemoveDirectoryA SetCurrentDirectoryA GetWindowsDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetShortPathNameW GetShortPathNameA GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA GetTempPathA GetTempFileNameA FindClose FindFirstFileA SetLastError FindFirstFileW FindNextFileA CreateFileA CreateFileW GetFileSize SetFilePointer ReadFile SetFileTime WriteFile SetEndOfFile CreateEventA EnterCriticalSection LeaveCriticalSection Sleep GetCommandLineW CreateProcessA GetExitCodeProcess IsBadReadPtr SetUnhandledExceptionFilter RaiseException GetSystemInfo VirtualProtect GetLocaleInfoA IsBadCodePtr GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetCPInfo GetOEMCP GetACP VirtualQuery InterlockedExchange RtlUnwind IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy TlsGetValue TlsSetValue TlsFree GetCurrentThreadId TlsAlloc GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle HeapSize GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA HeapFree HeapAlloc HeapReAlloc ExitProcess GetProcAddress TerminateProcess GetCurrentProcess

user32

PostMessageA ShowWindow DestroyWindow KillTimer SetTimer SetDlgItemTextA EndDialog IsDlgButtonChecked GetDlgItem MessageBoxW DialogBoxParamA GetDesktopWindow SetForegroundWindow GetWindowLongA SetWindowLongA SetWindowTextW GetWindowTextA GetWindowTextLengthA SetWindowTextA SendMessageA LoadStringW LoadStringA CharPrevA

oleaut32

VariantClear SysAllocString SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

Kontakt 7 7.3.2 Setup PC.exe

comctl32

kernel32

user32

oleaut32

generic