General

  • Target
    GuitarPro.exe
  • Size 51.1MB
  • Sample261018-temkysf18x
  • SHA256 430f38e32b46ce0a640dd7d59f76f17b92166967268504ecad7ae4cf5b5fbad2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • GuitarPro.exe
    .exe 51.1MB

GuitarPro.exe

  • IMPHASH 3bc1c9b81aca810cb9c9f7fef0a2b2b3
  • SHA256 430f38e32b46ce0a640dd7d59f76f17b92166967268504ecad7ae4cf5b5fbad2
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
69:30:11:ac:14:c4:43:00:21:fc:d6:94:8b:e1:1b:ad:9f:85:c1:19
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=444 341 028,CN=SARL AROBAS MUSIC,O=SARL AROBAS MUSIC,STREET=71 QUAI DE L'OUEST,L=Lille,ST=Nord,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061726f6261732d6d757369632e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
13580576
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Jenkins\ci\workspace\tar-pro-release_v8_release_8.0.0\Build\Release\GuitarPro.pdb