ABLETON_KEYGEN_V_1.rar
- SHA256 5558157c78172f8f91e4e6393f8b0933fc2ee268031790be95ae0a7573f14bb2
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ableton keygen.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
5 signatures
150 seconds
General
- Target ABLETON_KEYGEN_V_1.rar
- Size 749KB
- Sample261018-s2mc2aev8p
- SHA256 5558157c78172f8f91e4e6393f8b0933fc2ee268031790be95ae0a7573f14bb2
- MD5 e198dd8c0538dfd17a6304ca09ee11da
- SHA1 56a35a8c26d850945e34343fc450ff97863886f5
- SHA512 cb03098b7f9f2b3426cae302a7c625df89a4db022344b10b7f0e99ac2432282c19183ff95c4386922b3ed9412a8c1e2bdbdfdedb3faaa215c29359f0c84d0cdf
- SSDEEP 12288:ANUEIElLVltuR0O1DyztNnmCP8Jv4E8gfioMkYeX6K2ys+kk1nYHYlzOQ42Vwc:WUEIElLbtniyztNnbPgv4E3fioMReKK1
- TLSH T1FBF4337E385902119F71E39ABB578ED97CBA0EF4824FCDC95363B29A825975230035EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ableton keygen.exe
File Explorer
-
ABLETON_KEYGEN_V_1.rar.rar 749KB
-
AUDIOWAREZ.nfo3KB
-
Ableton keygen.exe.exe 1.8MB
AUDIOWAREZ.nfo
- SHA256 6f0b913dbe669a2b1ec3c7b4e884097f9e7670b69d6dcf5feb727c2f375abad8
- MD5 4336691c942ffde698ab91a047686097
- SHA1 362e718f01d264bf3f46f2498459be08be4a5ef4
- SHA512 0ca592de3aca1b5fa8aabbb746ee539f76d02393bc00f203f1e5e4424088ee0b30f6ce695c3ea1563bafa3b3266c6cc96915cea06e7d6db47e638b7803bae01f
- TLSH T16771002647CB227303F0D35295704BB2FB36943BE6A26E5C344D81B583A7A7582AD93D
- MD5 SHA1 SHA512 TLSH
Ableton keygen.exe
- IMPHASH a0eafb52db77eddca752025c3dd7d1d2
- SHA256 13044227afa2e800237038ad95d53c4e2a22f4aac1e2004c202663399faf9357
- MD5 c0bacf62b2ad2ffdf63bbd1196026e76
- SHA1 17142884f8081c808d64673d90233a0585da37fa
- SHA512 fcf8a2db546eefd3af1182bdedcb6cceb0d24f13d8d0421df3eac031822c9cf47e9fb435bb39cad8531824484a78ce6e9fd3d500af70ff91fa175df9f606875d
- SSDEEP 24576:IsELBDt7quimMnmszXAxHJons/bl1URz9Hs9Fz7GKaWfHMdH9fSDc+1B/p3n/pa:IsELNt+ms7YHJx9YrpS31TX
- TLSH T1DE95AD14A3A801A8E877D734CA619332D6B07D564770E58F0689F6452F33E92AFBF712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
439088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\SAURABH\Downloads\Telegram Desktop\Ableton keygen csharp\bin\Release\net8.0\win-x64\native\Ableton keygen.pdb
advapi32
RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
bcrypt
BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptCreateHash
BCryptGenRandom
BCryptOpenAlgorithmProvider
crypt32
CryptFindOIDInfo
kernel32
TlsAlloc
InitializeCriticalSectionAndSpinCount
TlsSetValue
RaiseException
RtlPcToFileHeader
EncodePointer
TlsGetValue
TlsFree
GetCPInfoExW
SetLastError
GetConsoleScreenBufferInfo
GetLastError
GetConsoleMode
GetFileType
ReadFile
ReadConsoleW
ReadConsoleInputW
WriteFile
WriteConsoleW
GetConsoleCP
GetConsoleOutputCP
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
CloseThreadpoolIo
RaiseFailFastException
GetCalendarInfoEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
GetLocaleInfoEx
ResolveLocaleName
FindStringOrdinal
GetTickCount64
GetCurrentProcess
GetCurrentThread
Sleep
DeleteCriticalSection
LocalFree
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
QueryPerformanceCounter
InitializeCriticalSection
InitializeConditionVariable
WaitForMultipleObjectsEx
QueryPerformanceFrequency
GetFullPathNameW
GetLongPathNameW
GetCPInfo
LocalAlloc
GetProcAddress
LocaleNameToLCID
LCMapStringEx
EnumTimeFormatsEx
EnumCalendarInfoExEx
CreateFileW
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FlushFileBuffers
FreeLibrary
GetFileInformationByHandleEx
GetModuleFileNameW
GetOverlappedResult
LoadLibraryExW
SetFileInformationByHandle
SetThreadErrorMode
DuplicateHandle
GetThreadPriority
SetThreadPriority
GetCurrentProcessorNumberEx
CloseHandle
SetEvent
CreateEventExW
GetEnvironmentVariableW
FormatMessageW
FlushProcessWriteBuffers
WaitForSingleObjectEx
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
TerminateProcess
SwitchToThread
CreateThread
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
ResetEvent
DebugBreak
WaitForSingleObject
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
InitializeSListHead
GetCurrentProcessId
ole32
CoTaskMemAlloc
CoGetApartmentType
CoWaitForMultipleHandles
CoInitializeEx
CoTaskMemFree
CoUninitialize
api-ms-win-crt-math-l1-1-0
ceil
pow
__setusermatherr
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
calloc
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
strncpy_s
strcmp
_stricmp
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_exit
__p___argc
_get_initial_wide_environment
__p___wargv
_initialize_wide_environment
_cexit
terminate
_crt_atexit
_c_exit
_register_onexit_function
_initialize_onexit_table
abort
_configure_wide_argv
_register_thread_local_exe_atexit_callback
exit
_set_app_type
_seh_filter_exe
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vfprintf
__p__commode
__acrt_iob_func
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
DotNetRuntimeDebugHeader
Name
.text
Size
446KB
Virtual Size
445KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.managed
Size
716KB
Virtual Size
715KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
hydrated
Size
Virtual Size
321KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
643KB
Virtual Size
642KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=261, version=30034,
count=12, id=260, version=30034,
count=9, id=259, version=30034,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=27412,
count=229, id=1, productName=Unmarked objects,
count=9, id=259, version=33218,
count=1, id=260, version=33218,
count=1, productName=Unmarked objects (old),
count=69, id=261, version=33218,
count=1, id=256, version=30154,
count=1, id=258, version=30154,