sound-forge-pro[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
sound-forge-pro.exe
Size 5.9MB
Sample261003-vasf3ssfrc
SHA256 7d9222165521f259b0aa69af751b745d02bb4edfbaf6401050c0a51e79d72108
MD5 edf0451fa488d539d5a3911214f6177b
SHA1 29de43cfa313b32b9ad74a6fbe9fe6d905c7c3b2
SHA512 884f0ef5afcafa1283c77aff23f04955a518a4599b924a7f9a4c4e288b13806ac7899bd5c71c8f048f70156c37960292d671a6fa00012ac0c9d5b3cda896a7eb
SSDEEP 98304:bCxRXOhEc2MgYHTp+bqi7Gyu38wIin9LAf3WDGUzAfbeSq1WVp:bphd2Mge3i7puVdGJVq4Vp
TLSH
T19D56C0A47D4FC1ABF1C20371CDA4AB5D11BC9AA8173141FBF68B660F9AA44C15737B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

sound-forge-pro.exe

.exe 5.9MB

sound-forge-pro.exe

IMPHASH 5e4731b579fcbf2ee2d5b665a7fef172
SHA256 7d9222165521f259b0aa69af751b745d02bb4edfbaf6401050c0a51e79d72108
MD5 edf0451fa488d539d5a3911214f6177b
SHA1 29de43cfa313b32b9ad74a6fbe9fe6d905c7c3b2
SHA512 884f0ef5afcafa1283c77aff23f04955a518a4599b924a7f9a4c4e288b13806ac7899bd5c71c8f048f70156c37960292d671a6fa00012ac0c9d5b3cda896a7eb
SSDEEP 98304:bCxRXOhEc2MgYHTp+bqi7Gyu38wIin9LAf3WDGUzAfbeSq1WVp:bphd2Mge3i7puVdGJVq4Vp
TLSH
T19D56C0A47D4FC1ABF1C20371CDA4AB5D11BC9AA8173141FBF68B660F9AA44C15737B22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

a0:05:5d:46:1b:77:a1:47:a7:a4:4b:df:a7:27:67:f9:68:86:1e:e3:2e:7d:69:6b:7a:cb:b8:72:b3:31:8a:64

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,ST=Berlin,C=DE

Chains

Feb 9, 2021

CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,ST=Berlin,C=DE

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,ST=Berlin,C=DE

Serial Number

57:1c:5f:05:7e:b9:03:c6:51:87:11:e1:56:c4:e7:5f

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 3, 2020 - May 3, 2023

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

652194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\work\msi\Git\MxMSI_Master\_MsiBuildSystem\bin\SfxMaker\stub_Release_Win32_v120_xp.pdb

kernel32

LoadLibraryExW GlobalDeleteAtom lstrcmpA lstrcmpW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GlobalAddAtomW LoadLibraryA EncodePointer GlobalFindAtomW GetFileSizeEx GetFileTime SystemTimeToFileTime GetFullPathNameW GetVolumeInformationW LockFile UnlockFile DuplicateHandle GetStringTypeExW GetThreadLocale GlobalFlags CompareStringW GetSystemDefaultUILanguage SetErrorMode GetUserDefaultLCID RtlUnwind CreateThread ExitThread GetCPInfo GetSystemTimeAsFileTime ExitProcess GetModuleHandleExW AreFileApisANSI IsDebuggerPresent IsProcessorFeaturePresent SetStdHandle GetFileType HeapQueryInformation GetSystemInfo VirtualProtect VirtualQuery GetStartupInfoW GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter GetCurrentThread TerminateProcess IsValidCodePage GetOEMCP GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode ReadConsoleW OutputDebugStringW GetDateFormatW GetTimeFormatW LCMapStringW IsValidLocale EnumSystemLocalesW WriteConsoleW SetEnvironmentVariableA FreeResource LocalReAlloc LocalAlloc GlobalHandle EnterCriticalSection GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc LocalFree GlobalFree GlobalUnlock GlobalLock GlobalAlloc OutputDebugStringA GetACP MulDiv GetVersion FindResourceExW lstrlenA CreateProcessW GetEnvironmentVariableW LoadLibraryW FreeLibrary EnumResourceNamesW SetFilePointerEx FlushFileBuffers ResumeThread SuspendThread GetThreadPriority SetThreadPriority GetDriveTypeW GetCommandLineW FormatMessageW GetLongPathNameW InitializeCriticalSectionAndSpinCount RaiseException GetProcessHeap LCMapStringA GetStringTypeExA FormatMessageA WaitForSingleObjectEx CreateEventA CreateSemaphoreA WaitForMultipleObjectsEx OpenEventA SetWaitableTimer CreateWaitableTimerA CreateTimerQueue SignalObjectAndWait SwitchToThread GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread InitializeSListHead InterlockedPopEntrySList HeapSize HeapFree HeapReAlloc HeapAlloc DecodePointer Sleep GetExitCodeProcess GetDiskFreeSpaceExW MapViewOfFileEx GetFileAttributesExW GetFileAttributesW GetModuleFileNameW CreateFileMappingW UnmapViewOfFile GetCurrentProcess GetUserDefaultLangID GetUserDefaultUILanguage GetLocaleInfoW FindResourceW SizeofResource LoadResource LockResource WaitForMultipleObjects GetStdHandle GetFileInformationByHandle InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx SetFilePointer SetEndOfFile ReadFile WriteFile GetFileSize FindNextFileW FindFirstFileW GetModuleHandleA GetLogicalDriveStringsW FindClose MoveFileW DeleteFileW SetFileAttributesW CreateFileW RemoveDirectoryW CreateDirectoryW GetCurrentDirectoryW GetTempPathW GetSystemDirectoryW GetModuleHandleW SetFileTime SetLastError GetProcAddress FileTimeToLocalFileTime CreateSemaphoreW CreateEventW CloseHandle WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection GetLastError GetVersionExW VirtualFree VirtualAlloc FileTimeToSystemTime WideCharToMultiByte MultiByteToWideChar QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId DeleteCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter

user32

IntersectRect GetSysColorBrush DestroyMenu SetWindowTextW MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetClassLongW SetWindowLongW EqualRect AdjustWindowRectEx RemovePropW GetPropW SetPropW SetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture GetDlgCtrlID GetClassInfoExW GetClassInfoW CallWindowProcW DefWindowProcW GetMessageTime RealChildWindowFromPoint GetWindowTextLengthW SetFocus IsDialogMessageW GetTopWindow MessageBeep IsChild SetWindowContextHelpId WindowFromPoint GetLastActivePopup MessageBoxW PostQuitMessage LoadStringA CallNextHookEx SetWindowsHookExW ValidateRect DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow SetActiveWindow IsWindowEnabled GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW DestroyWindow LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem ClientToScreen EndPaint BeginPaint GetWindowDC CharNextW OffsetRect SetCapture ReleaseCapture CopyAcceleratorTableW InvalidateRgn SetRect RegisterClipboardFormatW PostThreadMessageW TabbedTextOutW GrayStringW DrawTextExW DrawTextW UnhookWindowsHookEx GetMessagePos GetMenuItemCount GetMenuItemID GetSubMenu SendDlgItemMessageA PtInRect IsRectEmpty DrawFrameControl ShowCaret HideCaret GetCursorPos SetCursor GetWindow GetParent GetWindowLongW MapWindowPoints GetWindowTextW GetForegroundWindow FlashWindowEx CreateWindowExW FillRect GetSysColor SystemParametersInfoW InvalidateRect DeleteMenu GetSystemMenu KillTimer SetTimer GetKeyState SetDlgItemTextW InflateRect CopyRect RedrawWindow GetFocus TrackMouseEvent ScreenToClient GetClientRect GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPos IsWindow AllowSetForegroundWindow GetWindowThreadProcessId GetClassNameW MsgWaitForMultipleObjects PeekMessageW IsWindowVisible UnregisterClassW MapDialogRect LoadIconW LoadCursorW GetWindowRect ReleaseDC GetDC DefDlgProcW RegisterClassW ReplyMessage RegisterWindowMessageW LoadImageW GetSystemMetrics PostMessageW SendMessageW EnableWindow DestroyIcon CharUpperW GetNextDlgGroupItem LoadStringW

gdi32

SetWindowExtEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect GetMapMode GetBkColor SetViewportExtEx GetRgnBox SetMapMode ExtTextOutW TextOutW SetTextColor GetTextColor SetBkColor ExtSelectClipRgn SaveDC RestoreDC RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetStockObject GetClipBox ExcludeClipRect Escape DeleteDC CreateBitmap OffsetViewportOrgEx SetViewportOrgEx DeleteObject CreateFontIndirectW GetDeviceCaps GetObjectW SelectObject CreateSolidBrush

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegDeleteValueW RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

SHOpenFolderAndSelectItems SHParseDisplayName SHGetSpecialFolderPathW SHCreateItemFromParsingName ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW ord165 ShellExecuteW

comctl32

ord413 ord410 InitCommonControlsEx ord412

shlwapi

UrlCreateFromPathW PathCreateFromUrlAlloc UrlIsW PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW

ole32

CreateILockBytesOnHGlobal CoFreeUnusedLibraries StgCreateDocfileOnILockBytes CoGetClassObject CLSIDFromProgID CLSIDFromString CoCreateGuid CoTaskMemAlloc StringFromCLSID CoTaskMemFree CoCreateInstance CoUninitialize CoInitialize StgOpenStorageOnILockBytes OleInitialize OleUninitialize CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter

oleaut32

OleCreateFontIndirect SysFreeString SysAllocString SysAllocStringLen VariantClear VariantCopy VariantInit VariantChangeType SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy

oledlg

OleUIBusyW

msi

ord118 ord48 ord92 ord171 ord160 ord159 ord8 ord32

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

274KB

Virtual Size

274KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

sound-forge-pro.exe

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

msi

oleacc

generic