File name:

VBCABLE_Driver_Pack43.zip

Full analysis: https://app.any.run/tasks/6e416bd9-b702-4848-8c17-36a9c7ce296a
Verdict: Suspicious activity
Analysis date: April 03, 2020, 04:55:09
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract
MD5:

3E2F6DDF5A06C66DC4DAED708F8BB2A6

SHA1:

0FC70FD364B76B3DBDF6C9780369A834ED9EFD3E

SHA256:

66FD0A4D9F4896FF41632B7E3D53892C085C4561F53E8AE8D0F0BC10EEDD1CDD

SSDEEP:

24576:dqtBKwfPZ5JLfG/Dtl27gdahBUV1G7h4si2KRayG81atW8:dsKwZ5ZfG/Bo72aQVeh4siZaA4tW8

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • VBCABLE_ControlPanel.exe (PID: 2428)
      • VBCABLE_ControlPanel.exe (PID: 3988)
      • VBCABLE_ControlPanel.exe (PID: 3500)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 3896)

  • INFO

    • Dropped object may contain Bitcoin addresses

      • WinRAR.exe (PID: 3896)

    • Manual execution by user

      • VBCABLE_ControlPanel.exe (PID: 2428)
      • VBCABLE_ControlPanel.exe (PID: 3500)
      • VBCABLE_ControlPanel.exe (PID: 3988)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: -
ZipCompression: Deflated
ZipModifyDate: 2014:09:02 17:16:17
ZipCRC: 0xe613802d
ZipCompressedSize: 1275
ZipUncompressedSize: 4146
ZipFileName: vbMmeCable64_win7.inf
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
46
Monitored processes
4
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe vbcable_controlpanel.exe no specs vbcable_controlpanel.exe vbcable_controlpanel.exe

Process information

PID
CMD
Path
Indicators
Parent process
2428"C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe" C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe—explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
MEDIUM
Description:
VB-AUDIO Virtual Cable Control Panel
Exit code:
3221226540
Version:
1, 0, 3, 5
Modules
Images
c:\users\admin\desktop\data\vbcable_controlpanel.exe
c:\systemroot\system32\ntdll.dll
3500"C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe" C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe
explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
HIGH
Description:
VB-AUDIO Virtual Cable Control Panel
Exit code:
0
Version:
1, 0, 3, 5
Modules
Images
c:\users\admin\desktop\data\vbcable_controlpanel.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
3896"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43.zip"C:\Program Files\WinRAR\WinRAR.exe
explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Exit code:
0
Version:
5.60.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
3988"C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe" C:\Users\admin\Desktop\data\VBCABLE_ControlPanel.exe
explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
HIGH
Description:
VB-AUDIO Virtual Cable Control Panel
Exit code:
0
Version:
1, 0, 3, 5
Modules
Images
c:\users\admin\desktop\data\vbcable_controlpanel.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
Total events
461
Read events
434
Write events
27
Delete events
0

Modification events

(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3896) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43.zip
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:mtime
Value:
100
(PID) Process:(3896) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:@cryptext.dll,-6145
Value:
Security Catalog
(PID) Process:(3896) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\DialogEditHistory\ExtrPath
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43
Executable files
11
Suspicious files
0
Text files
10
Unknown types
7

Dropped files

PID
Process
Filename
Type
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\pin_in.icoimage
MD5:E442346F22DA9A5BB15DFABA67A360B8
SHA256:934865449455103C1C5997D8220ACD160C3891F8A870F8E745B743D12681AC42
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\readme.txttext
MD5:67DE05DF45E547B434294B954C2DB7C4
SHA256:C802624D64DEA7F7B333E4464D3EC9B8BB2C6DA2CC1BD2D3A56889CF60ED77A7
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\pin_out.icoimage
MD5:235559DE67569EBC8FDCF5D51D753B57
SHA256:E8728A811E1F1AF7D2BA31F77E47D449D5BBA091E3E89A0DF325AC7A3E67652C
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable_2003.catcat
MD5:F3D83B61A6ECCE5DC90687496AABA335
SHA256:23A10E3BCD6FFE0DE6D3D67830BE4C447724B3299E13E954DD6BD2257CF55DA1
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable_vista.catcat
MD5:40401678D0272A448795432615F8B762
SHA256:810B30193A400B1559302C23F81EF8AAADF038B3CAF3AFF9BF200B59688A2DEF
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable_win7.catcat
MD5:9CC8F7A387484C49A6F1296586CD1DDB
SHA256:1C38AFACF115818C925BC26FAF216E3563E85BBC4D6D793E5F76F2AA670D08E7
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable_xp.catcat
MD5:F548E80F9A5DF41B91B1F6A51C9C362A
SHA256:51434EBBDA13CAF3C7617EF3035126BAACCA3E523FEAF6828B398D52503D70D2
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable64_2003.sysexecutable
MD5:326FAB289623BCF815C38FCD71330F3B
SHA256:5A726F3F1616F587C9F118BF337FD359DF3F7CB9FC967A14229D59A31F2A9720
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable_xp.sysexecutable
MD5:37B9BA59092ADFC1CA318A29D94F9D4E
SHA256:9F9BC80A96CC94C761887749E51D9B4FB7EE6741CE624B8B2F9F85CD2E3FB02E
3896WinRAR.exeC:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43\vbaudio_cable64_vista.catcat
MD5:9D5494E8135B57E46501C4761362FE88
SHA256:CC17731E91F2F071E4A108BBA34A2B8DCB69EA5975F4B9C39FCBC670E5CF15FB
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

No data

DNS requests

No data

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
VBCABLE_Driver_Pack43.zip