67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe

Sharing

Copy URL Twitter E-mail

General

Target
67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe
Size 618KB
Sample220520-31788acgar
SHA256 67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe
MD5 156067704a567f44a3bdeac98db99e69
SHA1 2167556a853480a6cccdb066dba8c7f453ed2100
SHA512 495592630ae1adfc905e4ad00a67b7f11de1e2a13636239297aaceb83b859ea576b1fd32659cad781371906983b049760284f84fc4d94de736f0add7611f9df8
SSDEEP 6144:ZFApUH6tEtEtEtEtEtEtEtEtEtEtzeMnMrvwgLdbxAfYAK7zf:2eeeeeeeeeezqrxLYfY9z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe

.exe 618KB

67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe

IMPHASH 199be9bc3a6f2091caba2ff07319dba5
SHA256 67d0374ccba4a4a176332496433359a3ba3a80cd5879c346776e4afdeed68bbe
MD5 156067704a567f44a3bdeac98db99e69
SHA1 2167556a853480a6cccdb066dba8c7f453ed2100
SHA512 495592630ae1adfc905e4ad00a67b7f11de1e2a13636239297aaceb83b859ea576b1fd32659cad781371906983b049760284f84fc4d94de736f0add7611f9df8
SSDEEP 6144:ZFApUH6tEtEtEtEtEtEtEtEtEtEtzeMnMrvwgLdbxAfYAK7zf:2eeeeeeeeeezqrxLYfY9z
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

d1:fa:29:50:d6:45:02:cf:2c:2a:4a:e5:96:c9:22:63:71:6a:ec:10

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=OOO Kineskop,O=OOO Kineskop,POSTALCODE=141981,STREET=Shkolnaya 10a\, of. 15,L=Dubna,ST=Moscowskaya Obl,C=RU

Serial Number

80:3d:de:c4:d8:7b:ad:33:05:80:37:e6:5f:c3:8d:9c

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2020 - May 28, 2021

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 12, 2019 - Dec 31, 2028

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Minor OS version

Major OS version

Entry point

324432

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId GetModuleFileNameW GetModuleHandleA LoadLibraryA LocalAlloc LocalFree GetModuleFileNameA ExitProcess GetUserDefaultLCID Process32First GetACP SetCommState FindAtomA RequestDeviceWakeup CancelWaitableTimer GetSystemTimeAsFileTime GetSystemDirectoryW DuplicateHandle CallNamedPipeW QueueUserWorkItem EndUpdateResourceA IsBadReadPtr BuildCommDCBW ReleaseSemaphore WriteFile Module32FirstW CreateMailslotA UpdateResourceW GetProcessAffinityMask GetCurrentDirectoryA HeapAlloc SetStdHandle GetDateFormatW OpenJobObjectA EnumResourceLanguagesW RequestWakeupLatency SetDefaultCommConfigW SetConsoleOutputCP GetConsoleCP TerminateJobObject GetFileInformationByHandle VerLanguageNameW CommConfigDialogA GetStartupInfoA VirtualUnlock GetShortPathNameA Heap32Next DeleteTimerQueueEx PeekConsoleInputW SetCalendarInfoW FlushFileBuffers GetEnvironmentStrings GetSystemInfo GetCurrentProcess lstrcpyW ExpandEnvironmentStringsW LocalReAlloc lstrlenW FindNextFileW CompareStringW FindClose lstrcmpiW GetLastError FindFirstFileW SetLastError LeaveCriticalSection EnterCriticalSection ExitThread GetEnvironmentVariableW SetEvent FindCloseChangeNotification Sleep WaitForMultipleObjects FindNextChangeNotification CloseHandle CreateEventW FindFirstChangeNotificationW ResumeThread SetThreadPriority CreateThread WaitForSingleObject InitializeCriticalSection SetProcessShutdownParameters OpenEventW QueryPerformanceCounter GetTickCount GetCurrentProcessId TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetVersionExA GetProcAddress GetStdHandle FreeEnvironmentStringsA VirtualProtect FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree HeapFree GetOEMCP GetCPInfo VirtualAlloc HeapReAlloc RtlUnwind InterlockedExchange VirtualQuery SetFilePointer MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

LockWorkStation AnimateWindow CopyAcceleratorTableW SetDeskWallpaper GetSysColor UnpackDDElParam LookupIconIdFromDirectoryEx DdeQueryStringA GetUserObjectInformationW SetDlgItemTextW GetMenuStringA wsprintfA EnumDesktopsA GrayStringW CountClipboardFormats LoadImageA GetClassLongW ToAsciiEx GetMessageW EnumDisplayDevicesW GetWindowModuleFileName VkKeyScanExW RealGetWindowClassA CreateCaret GetWindowRect GetTitleBarInfo SetClassLongW LoadStringW SendMessageW SetWindowPos GetDesktopWindow GetParent GetSystemMetrics GetWindowLongW SetForegroundWindow CheckDlgButton GetClientRect EndDialog PostMessageW GetDlgItem IsDlgButtonChecked SendDlgItemMessageW KillTimer SetTimer LoadImageW DialogBoxParamW MessageBoxW DefWindowProcW LoadIconW PostQuitMessage DispatchMessageW TranslateMessage CreateWindowExW RegisterClassW CharUpperA

gdi32

SetDIBColorTable GdiConvertBitmap PlayMetaFileRecord EnumEnhMetaFile EnableEUDC SetBitmapDimensionEx GdiRealizationInfo GdiAlphaBlend SetWorldTransform CreateICW CombineRgn StretchDIBits GdiDeleteSpoolFileHandle GetBkColor GdiGetCharDimensions CloseEnhMetaFile GetPath UnloadNetworkFonts GdiConvertEnhMetaFile GdiStartDocEMF GetROP2 SetBitmapBits GdiSetLastError EngMarkBandingSurface GdiCreateLocalMetaFilePict GetWindowOrgEx GdiArtificialDecrementDriver GdiQueryTable GetRasterizerCaps PolyDraw CloseFigure GetTextMetricsW AnyLinkedFonts GetTextFaceAliasW SetICMMode SelectClipPath EngWideCharToMultiByte CreateEnhMetaFileA CombineTransform CreateEnhMetaFileW GetKerningPairs GdiResetDCEMF GdiGradientFill EngStrokeAndFillPath GetEnhMetaFileA

advapi32

FreeSid GetAce RegNotifyChangeKeyValue RegOpenKeyExW RegCloseKey RegQueryValueExW SetSecurityInfo GetSecurityInfo

shell32

CommandLineToArgvW SHGetFileInfo Shell_NotifyIconW

ole32

CoInitializeSecurity

shlwapi

StrRChrA