CreativeEAX_App (6)[.]zip

resource
unpack001/CreativeEAX_App/Creative EAX Settings.dll
unpack001/CreativeEAX_App/Creative EAX Settings.exe
unpack001/CreativeEAX_App/EaxEngine.dll
unpack001/CreativeEAX_App/EaxReverb.dll

CreativeEAX_App (6).zip

SHA256 b96ba60210162c9ebc0b68d884653ed7422a0764baa216a32e28df89c6cc9152
MD5 53eaae05ca74f965a511edc72be26e54
SHA1 9d512f07591a30bbeec4a1133fa00842364f489b
SHA512 084a0d36c8261ce70fa352a04f4e5fe0973033ad92e93532c36099f7b8ea0ed03524c8bfb6de0340121c61acd151a722b5955b125cf8b88a9daac4eab7d2b221
SSDEEP 12288:0VYPV7TQaegDopvraz7o4EjNdu1QLAEbkXVsvw4JZq67qf:0VYPV7TNXMZafoNjbiGcXq7r7q
TLSH
T1D6C42376ED7E1621C0C8303FB4BB15AF5B56822277A9BEE98D8673404E7A2D07914FC4
MD5 SHA1 SHA512 SSDEEP TLSH

CreativeEAX_App/Creative EAX Settings.deps.json

SHA256 84790fcfd3748cb2a86152219261c5743963bab192023bc391c76140816bd403
MD5 ff04644aa3814c26d9d30ef66057ea76
SHA1 ce73a25e41a782cd2b9799bd5972575a723162d7
SHA512 6eaaaf81fe69e845d777ed7e1b9f07400b225cfa750165bddf6c7dc802db0164e60ba7c439727dc24814fa1d1ebc2883a4da8d8ea4a5fd4e7d6e0857884bb4af
TLSH
T18DF09209FA944D9B08B223B19437C782F73257332421281ABDBED05C0FB2B975590F67
MD5 SHA1 SHA512 TLSH

CreativeEAX_App/Creative EAX Settings.dll

SHA256 e895d9eecbf10e57bca3905fbe8779a87e3295ff455581fb0259d094682d0daa
MD5 f3c12ff68f5a8b1f0edecf00f48c086a
SHA1 5970a41f018dbaef1b2f78a303cbe1e3bc5c6083
SHA512 6173bad9a63115a2fcdc689f8c037ce2d623068079bb9321cd1f3ca277392db8277335818abc0744597548b24acc4c45ee44c95bbf256864620c2562d8621a0e
SSDEEP 6144:ubvZ4OgfZAATmADh70MT31pPOY0PymNzXISV9R0buA1ihCT3:ubvSfRTOY4ymNh
TLSH
T11FA56276B2EEECD0F4BC82B9C9B98D99D2532C497E64F45B21537F1B18F2288C4590B1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

CreativeEAX_App/Creative EAX Settings.exe

IMPHASH 53e4e12437621212a425d294842d0a96
SHA256 7f8f811c8fa3a963c6dba5aadac8efcb63597ef4acd647457a779401301c48ac
MD5 b11548c2aaac85f1f6aa3e4b1e26a391
SHA1 00b41fdac719b1910815ea8f1c94027b308e77a3
SHA512 d858ad63f239ee1ed7429da3687735e2cd4927e1b2db799ace818e8e62fedee2e895072c4aa11a337bb458e1070f77bf13b7946fe3b5d026a3bdb2a4eef6d4f8
SSDEEP 3072:sVDxk88wN1nLVu7dL1Z9Qnlf9rE38wGDWzaAT5vfvWc3+:YHRu7F1nQnB8yxYXT3
TLSH
T179042B13A66811BEE1B7D638C9A2C941F7727C694771A6CF03607EB60E767D09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

80800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

shell32

ShellExecuteW

advapi32

RegCloseKey ReportEventW RegisterEventSourceW RegOpenKeyExW RegGetValueW DeregisterEventSource

kernel32

TlsFree CreateActCtxW ActivateActCtx GetLastError FindResourceW GetWindowsDirectoryW GetProcAddress GetModuleHandleW FreeLibrary LoadLibraryExW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetStdHandle GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW FindClose GetFileAttributesW MultiByteToWideChar GetConsoleMode GetFileAttributesExW LoadLibraryA WriteConsoleW DeleteCriticalSection WideCharToMultiByte IsWow64Process OutputDebugStringW GetCurrentProcessId TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

api-ms-win-crt-runtime-l1-1-0

terminate _register_thread_local_exe_atexit_callback _c_exit __p___wargv __p___argc _exit exit _initterm_e _errno _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table abort _invoke_watson

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc malloc _callnewh free

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64_s wcsftime

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf __p__commode fputwc __acrt_iob_func __stdio_common_vswprintf _set_fmode _wfsopen fflush setvbuf __stdio_common_vsnwprintf_s

api-ms-win-crt-locale-l1-1-0

_create_locale ___mb_cur_max_func ___lc_codepage_func ___lc_locale_name_func __pctype_func _configthreadlocale setlocale _lock_locales _free_locale _unlock_locales

api-ms-win-crt-string-l1-1-0

strlen strcmp wcsncmp toupper strcpy_s _wcsdup wcsnlen

api-ms-win-crt-convert-l1-1-0

_wtoi wcstoul

api-ms-win-crt-math-l1-1-0

__setusermatherr

CreativeEAX_App/Creative EAX Settings.runtimeconfig.json

SHA256 96bc2946dff8790400d652ec7f8de7bb043e954980d59470c112788b68a1fbd3
MD5 7e4444b5a3e3cea574693f055f944011
SHA1 04dfc98aa994475e2803241a1d55bb4277dbb8da
SHA512 2fd5e7ffd3b12c6962d3ed7d7b99fa09b870173623701690cc0237529c32b008e219e48818a0bc4b6962fba2e3d161b8fa8ce38c03467329b0ddc9e58ef0ae8b
TLSH
T1BFF0276ACA106DB708B933BAD52AC182EB30532B10041D52B5FC081C6F776B21111F95
MD5 SHA1 SHA512 TLSH

CreativeEAX_App/EaxEngine.dll

SHA256 87869fd98d1c7ab7f3931f39812257a37e390280963d7d2922531ff34f5b0a9d
MD5 43db39eb526f0e484d0f5ead30094a96
SHA1 fead91c3776877d948056a958f6fe3bcd8004fb9
SHA512 c84ee85d79252dbbe2657a61d08b335beebcd6ce641389238774392439d03468b083e82d4776ffe04015448578e6daf10ba9b04759a4540a7a351eb131f05c15
SSDEEP 6144:B1BIv++MlInAtcgr14G9OFxrKzUK4XxBCyaDemu6ojsN9Izz0cX:hfPIGcgr14G9wKzP4hBI66o
TLSH
T162845B16E9A514BEE17B94B885772D02F6323C150370A9FB13A00B6B1EBBBD45E77231
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

138960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\blips\Desktop\Project EAX\Project EAX\build\Release\EaxEngine.pdb

Name

.text

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.eaxrv

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

CreativeEAX_App/EaxReverb.dll

IMPHASH 61f342d8c1ff658ede05bf3d9a6f97c2
SHA256 052681a6be92837f88bf08b3bde36fdd04cf05590697fbc6aab5233d241813b7
MD5 a2009fd7adf620e9125c19c443cd57d1
SHA1 b3a0aba8fc84b8502a9d5285d91631d85d814193
SHA512 a973d147fe9cfafcb0a562adb1614defb0cf8cdbc5d9f6a2a963a4713bf02d263f8263540ea5519da3c229b4ebbd33680cc1ebba3a56fdfb877a00cdd87693b2
SSDEEP 1536:AohX54Tz1h5ggTiH4OWk8y/AOj1NBqp3kkaJ:Aoh6Tz1h5ghYE3/AOj1XqpUkaJ
TLSH
T16D835B49B1E3C8E8C152D13092A7BF7A9F31BC150060AA2F13F5ED721DB6F90AE47665
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

131B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

CreativeEAX_App (6).zip

CreativeEAX_App/Creative EAX Settings.deps.json

CreativeEAX_App/Creative EAX Settings.dll

generic

CreativeEAX_App/Creative EAX Settings.exe

shell32

advapi32

kernel32

user32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

generic

CreativeEAX_App/Creative EAX Settings.runtimeconfig.json

CreativeEAX_App/EaxEngine.dll

generic

CreativeEAX_App/EaxReverb.dll

kernel32

msvcrt

ole32

shell32

generic

Sharing

General

Malware Config

Signatures

File Explorer

CreativeEAX_App (6).zip

CreativeEAX_App/Creative EAX Settings.deps.json

CreativeEAX_App/Creative EAX Settings.dll

generic

CreativeEAX_App/Creative EAX Settings.exe

shell32

advapi32

kernel32

user32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

generic

CreativeEAX_App/Creative EAX Settings.runtimeconfig.json

CreativeEAX_App/EaxEngine.dll

generic

CreativeEAX_App/EaxReverb.dll

kernel32

msvcrt

ole32

shell32

generic