2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba

Sharing

Copy URL Twitter E-mail

General

Target
2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba
Size 619KB
Sample220520-14648aefc5
SHA256 2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba
MD5 856c9d9c2b9242cdf2628fff86c2ca36
SHA1 578b1e772213dc4a75b0a46dd741b696825ebcfc
SHA512 bbba44363e6d77708eb67a336adc485868b7461d66eea1c1cbdad44947938830b8cb94d10abe3f6e5715d723732e5719710d0b12336e660fe98005d9bc2940e2
SSDEEP 6144:ZFApUH6tEtEtEtEtEtEtEtEtEtEtzeMnMrvwgLdbxAfYAK7zf:2eeeeeeeeeezqrxLYfY9z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba

.exe 619KB

2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba

IMPHASH 199be9bc3a6f2091caba2ff07319dba5
SHA256 2ed935e2467bc6328f823151f104f52abc3ad9de772e7a0623c9e370816cf6ba
MD5 856c9d9c2b9242cdf2628fff86c2ca36
SHA1 578b1e772213dc4a75b0a46dd741b696825ebcfc
SHA512 bbba44363e6d77708eb67a336adc485868b7461d66eea1c1cbdad44947938830b8cb94d10abe3f6e5715d723732e5719710d0b12336e660fe98005d9bc2940e2
SSDEEP 6144:ZFApUH6tEtEtEtEtEtEtEtEtEtEtzeMnMrvwgLdbxAfYAK7zf:2eeeeeeeeeezqrxLYfY9z
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

be:30:e8:c1:47:59:aa:d3:ca:6a:57:d7:2a:58:66:64:d2:a8:91:cd

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=OOO Kineskop,O=OOO Kineskop,POSTALCODE=141981,STREET=Shkolnaya 10a\, of. 15,L=Dubna,ST=Moscowskaya Obl,C=RU

Serial Number

80:3d:de:c4:d8:7b:ad:33:05:80:37:e6:5f:c3:8d:9c

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2020 - May 28, 2021

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 12, 2019 - Dec 31, 2028

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Minor OS version

Major OS version

Entry point

324432

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetModuleFileNameW GetModuleHandleA LoadLibraryA LocalAlloc LocalFree GetModuleFileNameA ExitProcess GetUserDefaultLCID Process32First GetACP SetCommState FindAtomA RequestDeviceWakeup CancelWaitableTimer GetSystemTimeAsFileTime GetSystemDirectoryW DuplicateHandle CallNamedPipeW QueueUserWorkItem EndUpdateResourceA IsBadReadPtr BuildCommDCBW ReleaseSemaphore WriteFile Module32FirstW CreateMailslotA UpdateResourceW GetProcessAffinityMask GetCurrentDirectoryA HeapAlloc SetStdHandle GetDateFormatW OpenJobObjectA EnumResourceLanguagesW RequestWakeupLatency SetDefaultCommConfigW SetConsoleOutputCP GetConsoleCP TerminateJobObject GetFileInformationByHandle VerLanguageNameW CommConfigDialogA GetStartupInfoA VirtualUnlock GetShortPathNameA Heap32Next DeleteTimerQueueEx PeekConsoleInputW SetCalendarInfoW FlushFileBuffers GetEnvironmentStrings GetSystemInfo GetCurrentProcess lstrcpyW ExpandEnvironmentStringsW LocalReAlloc lstrlenW FindNextFileW CompareStringW FindClose lstrcmpiW GetLastError FindFirstFileW SetLastError LeaveCriticalSection EnterCriticalSection ExitThread GetEnvironmentVariableW SetEvent FindCloseChangeNotification Sleep WaitForMultipleObjects FindNextChangeNotification CloseHandle CreateEventW FindFirstChangeNotificationW ResumeThread SetThreadPriority CreateThread WaitForSingleObject InitializeCriticalSection SetProcessShutdownParameters OpenEventW QueryPerformanceCounter GetTickCount GetCurrentProcessId TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetVersionExA GetProcAddress GetStdHandle FreeEnvironmentStringsA VirtualProtect FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree HeapFree GetOEMCP GetCPInfo VirtualAlloc HeapReAlloc RtlUnwind InterlockedExchange VirtualQuery SetFilePointer MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

LockWorkStation AnimateWindow CopyAcceleratorTableW SetDeskWallpaper GetSysColor UnpackDDElParam LookupIconIdFromDirectoryEx DdeQueryStringA GetUserObjectInformationW SetDlgItemTextW GetMenuStringA wsprintfA EnumDesktopsA GrayStringW CountClipboardFormats LoadImageA GetClassLongW ToAsciiEx GetMessageW EnumDisplayDevicesW GetWindowModuleFileName VkKeyScanExW RealGetWindowClassA CreateCaret GetWindowRect GetTitleBarInfo SetClassLongW LoadStringW SendMessageW SetWindowPos GetDesktopWindow GetParent GetSystemMetrics GetWindowLongW SetForegroundWindow CheckDlgButton GetClientRect EndDialog PostMessageW GetDlgItem IsDlgButtonChecked SendDlgItemMessageW KillTimer SetTimer LoadImageW DialogBoxParamW MessageBoxW DefWindowProcW LoadIconW PostQuitMessage DispatchMessageW TranslateMessage CreateWindowExW RegisterClassW CharUpperA

gdi32

SetDIBColorTable GdiConvertBitmap PlayMetaFileRecord EnumEnhMetaFile EnableEUDC SetBitmapDimensionEx GdiRealizationInfo GdiAlphaBlend SetWorldTransform CreateICW CombineRgn StretchDIBits GdiDeleteSpoolFileHandle GetBkColor GdiGetCharDimensions CloseEnhMetaFile GetPath UnloadNetworkFonts GdiConvertEnhMetaFile GdiStartDocEMF GetROP2 SetBitmapBits GdiSetLastError EngMarkBandingSurface GdiCreateLocalMetaFilePict GetWindowOrgEx GdiArtificialDecrementDriver GdiQueryTable GetRasterizerCaps PolyDraw CloseFigure GetTextMetricsW AnyLinkedFonts GetTextFaceAliasW SetICMMode SelectClipPath EngWideCharToMultiByte CreateEnhMetaFileA CombineTransform CreateEnhMetaFileW GetKerningPairs GdiResetDCEMF GdiGradientFill EngStrokeAndFillPath GetEnhMetaFileA

advapi32

FreeSid GetAce RegNotifyChangeKeyValue RegOpenKeyExW RegCloseKey RegQueryValueExW SetSecurityInfo GetSecurityInfo

shell32

CommandLineToArgvW SHGetFileInfo Shell_NotifyIconW

ole32

CoInitializeSecurity

shlwapi

StrRChrA