pulsed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pulsed.exe
Size

5.5MB
MD5

3fd3937bfe06d1fe40144907d8fe1463
SHA1

1d6617ffc465f67674bcdab3bce4440abce5d7f6
SHA256

517af63bf54611b1ae3707b905aa9263c3e139dc576acc53ee1cf34e75c3ac7a
SHA512

ca666c6ffebb7d09e549d6430838e814b3716cedadd0b511018da0d301581ae889da947c91e4fa2212561a979ef4d926e3c0d8e22a4c12ed58b7410346c392de
SSDEEP

49152:sIjzyjnpUhMhukQNosSICGr8CLBb4D5k425Fr5SclXzbX:sIjzyjnpUMONosSxGrhN894OwjD

Score

N/A

Malware Config

Signatures

Files

pulsed.exe
.exe windows x86

64e6a9ff9e7228c21348997eb96a2b62

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:55:0e:d6:97:99:2b:39:7e:3f:1a:d8:e2:a6:62:d1
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

22/03/2022, 00:00

Not After

22/03/2023, 23:59

Subject

CN=GRASS RAIN\, s.r.o.,O=GRASS RAIN\, s.r.o.,ST=Trnavský kraj,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7c:cb:b4:90:0e:ad:57:e7:3a:de:a7:6d:ef:dc:7b:44:34:c8:23
Signer

Actual PE Digest

0a:7c:cb:b4:90:0e:ad:57:e7:3a:de:a7:6d:ef:dc:7b:44:34:c8:23

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=GRASS RAIN\, s.r.o.,O=GRASS RAIN\, s.r.o.,ST=Trnavský kraj,C=SK

07/05/2022, 01:12
Valid: true

Chain 1

CN=GRASS RAIN\, s.r.o.,O=GRASS RAIN\, s.r.o.,ST=Trnavský kraj,C=SK

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LoadResource
GetModuleHandleW
GetProcessHeap
CreateThread
SetLastError
FindResourceW
CancelIo
DuplicateHandle
GlobalHandle
SetThreadExecutionState
RemoveDirectoryW
GetCurrentProcessId
Process32NextW
ProcessIdToSessionId
LocalFree
SetUnhandledExceptionFilter
Process32FirstW
GetModuleFileNameW
GetFileSize
CreatePipe
GetStartupInfoW
WaitForMultipleObjects
DeviceIoControl
QueryPerformanceCounter
ReleaseMutex
GetStdHandle
GetExitCodeProcess
GetOverlappedResult
GetComputerNameW
SystemTimeToTzSpecificLocalTime
ExitProcess
CreateToolhelp32Snapshot
GlobalLock
ConnectNamedPipe
LoadLibraryExW
GetFileSizeEx
FreeResource
GlobalFree
Sleep
FreeLibrary
CopyFileW
SetThreadPriority
MoveFileW
DisconnectNamedPipe
WaitForSingleObject
InterlockedIncrement
SetPriorityClass
InterlockedExchange
LoadLibraryW
FindClose
OpenProcess
GetVersionExW
DeleteFileW
GetCurrentProcess
GetEnvironmentVariableW
LeaveCriticalSection
InitializeCriticalSection
GetCurrentDirectoryW
GetCurrentThread
GetCurrentThreadId
VerifyVersionInfoW
InterlockedDecrement
InterlockedExchangeAdd
GetTickCount
GetTempPathW
FlushFileBuffers
WriteFile
CreateProcessW
CloseHandle
SetFilePointerEx
GetProcAddress
ResetEvent
MulDiv
GetThreadPriority
WideCharToMultiByte
PeekNamedPipe
FindNextFileW
GetDriveTypeW
EnterCriticalSection
MoveFileExW
SetEndOfFile
CreateDirectoryW
CreateEventW
VerSetConditionMask
MultiByteToWideChar
SetEnvironmentVariableW
FindFirstFileW
lstrlenA
GetCommandLineW
SetFileAttributesW
lstrcpyW
MapViewOfFile
CreateFileMappingW
ResumeThread
FileTimeToLocalFileTime
SetCurrentDirectoryW
GetShortPathNameW
GetSystemTime
GetDiskFreeSpaceExW
GetUserDefaultLCID
VirtualQuery
GetPrivateProfileIntW
GetLocaleInfoW
GetPrivateProfileSectionNamesW
GlobalSize
GetTimeZoneInformation
GetSystemInfo
GlobalAlloc
GetVersionExA
CreateMutexW
GetPrivateProfileStringW
HeapFree
GetModuleFileNameA
GetUserDefaultUILanguage
WaitNamedPipeW
HeapAlloc
GlobalUnlock
SizeofResource
LockResource
GetACP
SetFilePointer
CreateNamedPipeW
GetLastError
TerminateProcess
GetFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetLogicalDriveStringsW
LocalAlloc
GlobalMemoryStatusEx
QueryPerformanceFrequency
GetFileAttributesW
SetEvent
CreateFileW
ReadFile
DeleteCriticalSection
UnmapViewOfFile
GetSystemTimeAsFileTime
HeapReAlloc
UnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
TlsFree
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
IsDebuggerPresent
HeapDestroy
HeapCreate
GetLocaleInfoA
VirtualFree
RaiseException
VirtualAlloc

advapi32

GetSidLengthRequired
RegOpenKeyExW
GetUserNameW
SetFileSecurityW
DuplicateTokenEx
RegDeleteKeyW
RegDeleteValueW
GetSidSubAuthority
FreeSid
RegSetValueExW
GetAce
InitializeAcl
CryptDestroyKey
RegQueryValueExW
CheckTokenMembership
CryptAcquireContextW
SetSecurityDescriptorDacl
CryptDestroyHash
CryptCreateHash
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegSetKeySecurity
CryptDecrypt
RegCloseKey
RegCreateKeyExW
RegEnumKeyW
RegOpenKeyW
CryptDuplicateKey
CryptDeriveKey
InitializeSid
RegEnumValueW
OpenProcessToken
RegQueryInfoKeyW
RegEnumKeyExW
AddAccessAllowedAce
CryptHashData
CryptEncrypt

gdi32

BitBlt
SetWindowExtEx
SetBrushOrgEx
CreateBitmap
GetWindowExtEx
SetBkColor
Polygon
GetDIBits
GetViewportExtEx
SetTextAlign
GetObjectA
CreateDIBSection
CreatePatternBrush
GetTextExtentPoint32W
SetPixel
SetViewportExtEx
ExtFloodFill
CreateCompatibleBitmap
CreateRoundRectRgn
ExtTextOutW
SetDIBits
GetDeviceCaps
StretchBlt
DeleteObject
CreatePen
LineTo
GetBkMode
DeleteDC
CreateFontW
SetTextColor
Polyline
MoveToEx
SetBkMode
CreateFontIndirectW
GetCurrentObject
SelectObject
CreateCompatibleDC
TextOutW
CreateSolidBrush
GetStockObject
GetObjectW
CreateDIBitmap
PolyPolyline
SetStretchBltMode

ole32

CoSetProxyBlanket
PropVariantClear
CreateStreamOnHGlobal
CoGetMalloc
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
CoInitializeSecurity

oleaut32

SysAllocString
VariantInit
OleLoadPicturePath
VariantClear
SysAllocStringLen
SysStringByteLen
SysFreeString
SysAllocStringByteLen
OleLoadPicture

shell32

Shell_NotifyIconW
SHGetFolderPathW
SHParseDisplayName
DragQueryFileW
ord155
SHGetPathFromIDListW
DragFinish
ShellExecuteExW
SHEmptyRecycleBinW
DragQueryPoint
SHGetMalloc
SHChangeNotify
ShellExecuteA
DragAcceptFiles
SHBrowseForFolderW
SHGetDesktopFolder
ord680
CommandLineToArgvW
SHCreateShellItem
ShellExecuteW

shlwapi

SHDeleteEmptyKeyW
StrCmpLogicalW
SHDeleteKeyW
PathCompactPathExW

user32

SetWindowPos
GetMenu
InvalidateRect
IsZoomed
SetFocus
GetDlgCtrlID
IsIconic
SetTimer
EndPaint
CreatePopupMenu
IsWindowEnabled
SetCapture
MapVirtualKeyW
EndMenu
OpenClipboard
MonitorFromWindow
CallNextHookEx
CreateDialogIndirectParamW
SetWindowWord
GetClassNameA
ScrollWindowEx
GetKeyNameTextW
EnumWindows
MapDialogRect
SetMenuItemInfoW
GetWindowThreadProcessId
GetSysColorBrush
SetClassLongW
LoadIconW
DispatchMessageW
GetScrollInfo
SystemParametersInfoW
GetMessageW
ClientToScreen
GetAsyncKeyState
GetWindowTextLengthW
keybd_event
CharUpperW
InsertMenuItemW
GetClassNameW
GetMenuBarInfo
AllowSetForegroundWindow
GetScrollBarInfo
RemovePropW
ModifyMenuW
RegisterWindowMessageW
EnableWindow
FindWindowExW
FindWindowW
SetActiveWindow
wsprintfW
SetMenuInfo
CreateDialogParamW
GetIconInfo
DeleteMenu
PostQuitMessage
PeekMessageW
DialogBoxIndirectParamW
GetWindowTextW
SetWindowPlacement
GetSystemMetrics
ReleaseCapture
SetWindowsHookExW
CloseClipboard
MapWindowPoints
GetDlgItemTextW
GetClipboardData
FlashWindowEx
SetScrollInfo
CheckMenuItem
GetComboBoxInfo
IsDialogMessageW
IsClipboardFormatAvailable
LoadStringW
TranslateMessage
IsCharAlphaW
RegisterClassW
InsertMenuW
IsWindow
SetMenu
AttachThreadInput
InflateRect
DrawIconEx
MsgWaitForMultipleObjects
SetDlgItemTextW
SetDlgItemInt
SetWindowRgn
CallWindowProcW
DrawFocusRect
GetMonitorInfoW
GetPropW
DrawEdge
GetAncestor
GetCursor
MonitorFromRect
GetMenuItemCount
GetWindowWord
WindowFromPoint
GetWindow
WindowFromDC
DrawStateW
MonitorFromPoint
GetMenuInfo
GetKeyboardState
GetCapture
GetSubMenu
EndDialog
GetDlgItemInt
GetActiveWindow
PostMessageW
GetCursorInfo
SetWindowLongW
CopyImage
SetPropW
GetFocus
BeginPaint
SetWindowTextW
DefWindowProcW
DestroyWindow
SetForegroundWindow
MessageBoxW
ReleaseDC
CheckDlgButton
ScreenToClient
UpdateWindow
DialogBoxParamW
GetDesktopWindow
SetCursor
GetWindowRect
LoadImageW
EnableMenuItem
TrackPopupMenu
MoveWindow
BringWindowToTop
DestroyIcon
GetClientRect
ShowWindow
CreateWindowExW
SendMessageW
IsWindowVisible
DrawTextW
GetDlgItem
GetWindowLongW
KillTimer
GetKeyState
WaitForInputIdle
GetSysColor
IsDlgButtonChecked
GetForegroundWindow
GetWindowDC
AppendMenuW
FrameRect
LoadCursorW
RemoveMenu
DestroyMenu
UnhookWindowsHookEx
GetWindowPlacement
ChildWindowFromPoint
GetMenuItemInfoW
DrawTextExW
GetDC
GetParent
SendDlgItemMessageW
FillRect

crypt32

CertCloseStore
CertFreeCertificateContext
CertVerifySubjectCertificateContext
CryptQueryObject
CertFindCertificateInStore

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

WerCAXL
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hongzhi
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gerard
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atlanta
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.francis
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.hakan
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

64e6a9ff9e7228c21348997eb96a2b62

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

77:55:0e:d6:97:99:2b:39:7e:3f:1a:d8:e2:a6:62:d1Certificate

Extended Key Usages

Key Usages

0a:7c:cb:b4:90:0e:ad:57:e7:3a:de:a7:6d:ef:dc:7b:44:34:c8:23Signer

Signature Validations

Verification

07/05/2022, 01:12 Valid: true

Chain 1

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

ole32

oleaut32

shell32

shlwapi

user32

crypt32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 477KB - Virtual size: 477KB

.data Size: 38KB - Virtual size: 569KB

.rsrc Size: 708KB - Virtual size: 708KB

.reloc Size: 115KB - Virtual size: 114KB

WerCAXL Size: 220KB - Virtual size: 219KB

.hongzhi Size: 512B - Virtual size: 3KB

.gerard Size: 512B - Virtual size: 3KB

.atlanta Size: 512B - Virtual size: 3KB

.francis Size: 512B - Virtual size: 3KB

.hakan Size: 2.5MB - Virtual size: 2.5MB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

77:55:0e:d6:97:99:2b:39:7e:3f:1a:d8:e2:a6:62:d1
Certificate

0a:7c:cb:b4:90:0e:ad:57:e7:3a:de:a7:6d:ef:dc:7b:44:34:c8:23
Signer

07/05/2022, 01:12
Valid: true

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 477KB - Virtual size: 477KB

.data
Size: 38KB - Virtual size: 569KB

.rsrc
Size: 708KB - Virtual size: 708KB

.reloc
Size: 115KB - Virtual size: 114KB

WerCAXL
Size: 220KB - Virtual size: 219KB

.hongzhi
Size: 512B - Virtual size: 3KB

.gerard
Size: 512B - Virtual size: 3KB

.atlanta
Size: 512B - Virtual size: 3KB

.francis
Size: 512B - Virtual size: 3KB

.hakan
Size: 2.5MB - Virtual size: 2.5MB