Voicemod Pro v1.2.6.8 (x64).zip
- SHA256 de76b9aef99484da1f871a798d4c3c86dda05e3be0ae6c1bb45e87319fcd6536
Behavioral task
behavioral1
Sample
Voicemod Pro v1.2.6.8 (x64).zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
General
- Target Voicemod Pro v1.2.6.8 (x64).zip
- Size 43.8MB
- Sample261027-yedehat13n
- SHA256 de76b9aef99484da1f871a798d4c3c86dda05e3be0ae6c1bb45e87319fcd6536
- MD5 a7f03e55af026377d4ae21b6b39934e7
- SHA1 949bb1766f43a7796ad84498c0af1deae600fdbe
- SHA512 d7f1a9bd5d854299185445dff8e368e0d06747cc7b6f5b08259d1b5eb88729349da6d6599aecc19ef8ce7c007d0c41e3b6acba96f2a69a2e528f71b4621760b7
- SSDEEP 786432:zM9wtQvDpGieU6uw7et/UREPDtPAVQsJTi1s9eMll6Co4U0ZuTruanvDGpBT4mH5:zhQdPc7et/KUyVQsJn9eMll6Co4U0Zya
- TLSH T1BAA733EE4C268FED6E34E7392C255FBAA76FACCA339D9C0191164364D23AC239543174
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe ConfuserEx static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll ConfuserEx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe unpack001/Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe innosetup
File Explorer
-
Voicemod Pro v1.2.6.8 (x64).zip.zip 43.8MB
-
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe.exe 2.7MB
-
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll.dll 22.4MB
-
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Instructions.txt767B
-
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe.exe 22.2MB
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe
- SHA256 2a4176466f2a9cb6edfb74f04ecc737672363876b7df6b06fe5132533eaf0d05
- MD5 237551f6b806666f9c0c3f5669380195
- SHA1 5a7aa3c8460e1be4e4cd3d244a59b285a8dcdda6
- SHA512 87eaa33d93513f217d754acde0191ae0c7b73a9443602e8cbb44da09e66a33a19bcbb8a503fce7a08ed15174afe5f1dc708896fb415fca174a721b22bf969f69
- SSDEEP 49152:/3bKUlADq0GArjFFLqIHaLafIXYXpdwbSC:eUToFFL5HHfWwpdweC
- TLSH T188D5AD0137A0C908E46A1E768D30C5EC5332BC0AEF65E64F75DA3B6F2ABA7814D11767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll
- SHA256 7e936df694ae0dcddf6ba8a154f88ec6b9c44a782322757112d594df2ebb3962
- MD5 387497039e5dd83a0d599df223b3a4f7
- SHA1 b3e42f1aa6eb776eeb42e398797e6ef7cdff257f
- SHA512 69604fe4ce014aaeefa310111b7cd7d424cf11537b080cfb6733ff43a53c66b32e662a4b73218d05b6e364900363a7145cea7f2bf1db4a7202a28e01ff781e21
- SSDEEP 393216:8m8S+7v/NOmhOM88xlLJApEC5L9Ln57Svnesezx5I+W0Y65NTBjAcs:8vv/Yme8xdCS2L9j5753KL095Nm
- TLSH T1F8372257F5849CAAD0A1507040E72E71BAB078AD833393D7C7A8567A7D337A00EB93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
22.4MB
Virtual Size
22.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/Instructions.txt
- SHA256 9b28a2e6ba7487dc60eff0830e14cb2acef4bccec5fd862fe887ab090ffc2aa7
- MD5 0bd66aa6b6af01652f1a1a00148b6c98
- SHA1 846b6b12f1025694f5796687a61e0e4ca819f958
- SHA512 0d61a96b65f098b7d08d684696db711eb1f641fe58cb598cecb1f36cd4d6ac48894c88f59682d1edc2cf479d06838268a0cdb7ad113ad9bc86e5f931b2d6120f
- TLSH T19F01DD9E7D32D3200922D30C70095168F717F968A281889570AFD0A136D57B5F5FC1CC
- MD5 SHA1 SHA512 TLSH
Voicemod Pro v1.2.6.8 (x64)/Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe
- SHA256 afd7452c34570e409fc0c2bc8a22fb7429a3cc8f48e85fe6a154656ec020330d
- MD5 2c74a59f3a312c9003e3bdf2f458c87f
- SHA1 97b1ede9c186ea36a74bceb1bf5e5689aad99086
- SHA512 b5e8810733694aa773c4c3b8a4063e5fddd962b64d2ad697223ddeb7337f09e8c21fc1efdb2c13c854f2e6884940fac217338e0839fd21d2b4db3c2da031a392
- SSDEEP 393216:D2MvvQScyvXuaXVTwkBgoEMNBrDXLuzLYzCdcv8p5UPxaMQlBf4PrE:SMvVcysoEcLuzLig5p5UPxtyAP4
- TLSH T13037339EAD1202F1ED31F6384C4866A61B7BB2ED3B2C5C12A57D47E19B34C736487638
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Digest
d9:27:08:7d:9e:d2:7e:44:aa:df:1a:c3:39:fc:2e:f8:e2:95:47:f9:0d:82:c5:43:ce:6d:5a:b4:de:dd:be:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
Chains
Jan 30, 2020
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=B98657844,CN=Voicemod Sociedad Limitada,O=Voicemod Sociedad Limitada,L=Valencia,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024553
Serial Number
02:c5:37:21:70:da:a8:25:b5:e2:4b:61:42:68:c5:b5
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 13, 2019 - Dec 17, 2020
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
1
Entry point
43728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ