General

Malware Config

Signatures

Files

• the-setup.exe

  .exe windows x86

  7ef2ace0c317bc9152e479f2dc5dd612

  
  

  Code Sign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  14-04-2021 00:00

  Not After

  16-04-2024 23:59

  Subject

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  38:63:de:f8

  Certificate

  Issuer

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Not Before

  24-12-1999 17:50

  Not After

  24-07-2029 14:15

  Subject

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  58:da:13:ff:00:00:00:00:51:ce:0d:f7

  Certificate

  Issuer

  CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

  Not Before

  22-07-2015 19:02

  Not After

  22-06-2029 19:32

  Subject

  CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4

  Certificate

  Issuer

  CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

  Not Before

  22-07-2020 15:33

  Not After

  29-12-2030 16:29

  Subject

  CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  2c:1d:bb:a7:e0:54:b4:1f:14:9f:e5:82:21:09:f9:ff:fd:fe:98:cb:90:69:2c:5b:a0:90:ba:f5:a1:12:7a:6e

  Signer

  Actual PE Digest

  2c:1d:bb:a7:e0:54:b4:1f:14:9f:e5:82:21:09:f9:ff:fd:fe:98:cb:90:69:2c:5b:a0:90:ba:f5:a1:12:7a:6e

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  03-02-2022 17:03

  Valid: true

  Chain 1

  CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ord17

  kernel32

  SetFileAttributesW

  Sleep

  GetExitCodeThread

  CreateThread

  SystemTimeToFileTime

  GetLocalTime

  GetFileAttributesW

  CreateDirectoryW

  lstrlenA

  GetSystemDefaultLCID

  GetSystemDefaultUILanguage

  GetUserDefaultUILanguage

  MultiByteToWideChar

  GetLocaleInfoW

  lstrcmpiW

  GetEnvironmentVariableW

  SetCurrentDirectoryW

  lstrcmpW

  RemoveDirectoryW

  FindClose

  FindNextFileW

  DeleteFileW

  FindFirstFileW

  GetCurrentDirectoryW

  GetTempPathW

  WideCharToMultiByte

  CompareFileTime

  ExpandEnvironmentStringsW

  GetSystemTimeAsFileTime

  LoadLibraryA

  SetEnvironmentVariableW

  WriteFile

  CreateFileW

  GetModuleFileNameW

  GetCommandLineW

  GetModuleHandleW

  CreateEventW

  SetEvent

  SetLastError

  InitializeCriticalSection

  LockResource

  LoadResource

  FindResourceA

  MulDiv

  GetCurrentThreadId

  GetSystemDirectoryW

  TerminateThread

  ResumeThread

  SuspendThread

  LocalFree

  lstrcpyW

  FormatMessageW

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  VirtualAlloc

  VirtualFree

  GetVersionExW

  GetFileSize

  SetFilePointer

  ReadFile

  SetFileTime

  SetEndOfFile

  GetFileInformationByHandle

  WaitForMultipleObjects

  GetCurrentProcess

  TerminateProcess

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetModuleHandleA

  SetUnhandledExceptionFilter

  GetStartupInfoA

  InterlockedCompareExchange

  InterlockedExchange

  GetLastError

  WaitForSingleObject

  CloseHandle

  GetProcAddress

  lstrlenW

  ResetEvent

  UnhandledExceptionFilter

  user32

  DefWindowProcW

  KillTimer

  CallNextHookEx

  PtInRect

  SetWindowsHookExW

  LoadImageW

  LoadIconW

  MessageBeep

  EnableWindow

  IsWindow

  CallWindowProcW

  GetSystemMenu

  ReleaseDC

  DestroyWindow

  wvsprintfW

  GetWindowLongW

  SetWindowLongW

  GetClientRect

  GetDlgItem

  GetKeyState

  MessageBoxA

  GetWindowDC

  DrawIconEx

  DialogBoxIndirectParamW

  GetWindow

  UnhookWindowsHookEx

  GetDC

  EnableMenuItem

  DrawTextW

  EndDialog

  SendMessageW

  CharUpperW

  ShowWindow

  SetWindowPos

  SystemParametersInfoW

  GetSystemMetrics

  CreateWindowExA

  SetFocus

  ScreenToClient

  ClientToScreen

  GetWindowRect

  GetParent

  wsprintfW

  GetWindowTextW

  GetWindowTextLengthW

  SetWindowTextW

  gdi32

  CreateFontIndirectW

  SelectObject

  GetDeviceCaps

  GetObjectW

  DeleteObject

  shell32

  SHBrowseForFolderW

  SHGetPathFromIDListW

  SHGetMalloc

  SHGetSpecialFolderPathW

  ShellExecuteExW

  SHGetFileInfoW

  ole32

  CoCreateInstance

  CoInitializeEx

  oleaut32

  VariantClear

  SysAllocStringLen

  SysAllocString

  msvcrt

  memcpy

  strncpy

  wcsncpy

  wcsncmp

  wcscmp

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  _beginthreadex

  __CxxFrameHandler3

  _CxxThrowException

  malloc

  free

  wcsstr

  _unlock

  __dllonexit

  _lock

  _onexit

  ??1type_info@@UAE@XZ

  __getmainargs

  _cexit

  _exit

  _XcptFilter

  _ismbblead

  exit

  _acmdln

  _initterm

  _amsg_exit

  __setusermatherr

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler4_common

  ?terminate@@YAXXZ

  _controlfp

  memmove

  _wcsnicmp

  memset

  _wtol

  _purecall

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  memcmp

  Sections

  .text

  Size: 83KB - Virtual size: 82KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 77KB - Virtual size: 76KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ