General

  • Target
    PhotonDSP TapeEngine Setup 1.1.exe
  • Size 2.7MB
  • Sample261009-11cffacy4l
  • SHA256 bfeecd7d4e2aca8479054d9ba9cd50a3641b1a023b5b54e9f84ceb1698c1bc94
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • PhotonDSP TapeEngine Setup 1.1.exe
    .exe 2.7MB
  • $COMMONFILES64/VST3/PhotonDSP/.TapeEngine-vst3-stage/Contents/Resources/Snapshots/F2AEE70D00DE4F4E50686F745470456E_snapshot.png
    .png 322KB
  • $COMMONFILES64/VST3/PhotonDSP/.TapeEngine-vst3-stage/Contents/x86_64-win/PhotonDSP TapeEngine.vst3
    .dll 1.9MB
  • $COMMONFILES64/VST3/PhotonDSP/.TapeEngine-vst3-stage/PlugIn.ico
    18KB
  • $COMMONFILES64/VST3/PhotonDSP/.TapeEngine-vst3-stage/desktop.ini
    80B
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/TapeEngine-Licenses/EN PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 89KB
  • $PLUGINSDIR/TapeEngine-Licenses/ES PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 91KB
  • $PLUGINSDIR/TapeEngine-Licenses/Third-Party Notices/Third-Party Notices.txt
    26KB
  • $PLUGINSDIR/TapeEngine-Licenses/UA PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 111KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Documentation/EN TapeEngine Manual.pdf
    .pdf 336KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Documentation/ES TapeEngine Manual.pdf
    .pdf 340KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Documentation/UA TapeEngine Manual.pdf
    .pdf 386KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Licenses/EN PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 89KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Licenses/ES PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 91KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Licenses/Third-Party Notices/Third-Party Notices.txt
    26KB
  • $PROGRAMFILES64/PhotonDSP/.TapeEngine-install-stage/Licenses/UA PhotonDSP TapeEngine EULA v1.1.pdf
    .pdf 111KB

PhotonDSP TapeEngine Setup 1.1.exe

  • IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
  • SHA256 bfeecd7d4e2aca8479054d9ba9cd50a3641b1a023b5b54e9f84ceb1698c1bc94
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:00:25:cc:3e:53:ce:50:0d:15:ca:6d:e1:18:0d:f2:ee:33:e4:a1:25:d6:c5:a6:4c:35:d0:d1:d1:91:43:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Svitlana Pivneva,O=Svitlana Pivneva,L=Kyiv,C=UA
Minor OS version
0
Major OS version
4
Entry point
13709
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths