TheOpen_140722[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

TheOpen_140722.rar
Size

12.2MB
MD5

ddd6e7ae3d0fb219af1d6c36f35bf1f7
SHA1

e54864c825fb50b5db676bd6a4ab2332ada38fa0
SHA256

54a460af6d2b696ce9fd1d28239828905cd65109b40d623ca9f4cb9849123c32
SHA512

6eacdb155ad52e09d84aff677f34b6eb9f2faecac21cf1ba0f355adb3da92b3ec6ef0abb5ccea979634611724152f1632faaa910580df2a1f770065c2589ad8e
SSDEEP

196608:vizpjtMSUakvOs86WTdYrMcLshLaph1GckY3negzeiDQ8m6U:qdUagOsVsdYQcw8jTkWneghDQ83U

Score

N/A

Malware Config

Signatures

Files

TheOpen_140722.rar
.rar
TheOpen_140722.cps.exe
.exe windows x86

0901266657d602fff9c7d9a865574642

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

14-04-2021 00:00

Not After

16-04-2024 23:59

Subject

CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:1b:37:20:61:63:fd:0b:b0:5d:3b:38:b1:5a:5e:f1:cf:3b:60:a4:cc:8e:4e:e3:c6:27:f3:27:6e:5a:b5:1a
Signer

Actual PE Digest

c1:1b:37:20:61:63:fd:0b:b0:5d:3b:38:b1:5a:5e:f1:cf:3b:60:a4:cc:8e:4e:e3:c6:27:f3:27:6e:5a:b5:1a

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

28-01-2022 11:50
Valid: true

Chain 1

CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.5`=
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.X^f
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Y?"
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fonts/NotoSansKhmer-Regular.ttf
fonts/NotoSansLao-Regular.ttf
fonts/NotoSansMyanmar-Regular.ttf
fonts/NotoSansYi-Regular.ttf
fonts/SketchFlow Print.ttf
fonts/symbol.ttf
fonts/trebucbd.ttf
fonts/trebucbi.ttf
locales/bg.pak
locales/bg.pak.info
locales/ca.pak
locales/ca.pak.info
locales/cs.pak
locales/el.pak
locales/el.pak.info
locales/en-GB.pak
locales/en-GB.pak.info
locales/en-US.pak
locales/en-US.pak.info
locales/es-419.pak
locales/es-419.pak.info
locales/es.pak
locales/es.pak.info
locales/et.pak
locales/et.pak.info
locales/fil.pak
locales/fil.pak.info
locales/fr.pak
locales/fr.pak.info
locales/hr.pak
locales/hr.pak.info
locales/hu.pak
locales/hu.pak.info
locales/id.pak
locales/id.pak.info
locales/it.pak
locales/it.pak.info
locales/ja.pak
locales/ja.pak.info
locales/lt.pak
locales/lt.pak.info
locales/lv.pak
locales/lv.pak.info
locales/mr.pak
locales/mr.pak.info
locales/ms.pak
locales/ms.pak.info
locales/nb.pak
locales/nb.pak.info
locales/nl.pak
locales/nl.pak.info
locales/pl.pak
locales/pl.pak.info
locales/pt-BR.pak
locales/pt-BR.pak.info
locales/pt-PT.pak
locales/pt-PT.pak.info
locales/ro.pak
locales/ro.pak.info
locales/ru.pak
locales/ru.pak.info
locales/sk.pak
locales/sk.pak.info
locales/sl.pak
locales/sl.pak.info
locales/sr.pak
locales/sr.pak.info
locales/sv.pak
locales/sv.pak.info
locales/sw.pak
locales/sw.pak.info
locales/ta.pak
locales/ta.pak.info
locales/te.pak
locales/te.pak.info
locales/th.pak
locales/th.pak.info
locales/tr.pak
locales/tr.pak.info
locales/uk.pak
locales/uk.pak.info
locales/vi.pak
locales/vi.pak.info

Sharing

General

Malware Config

Signatures

Files

0901266657d602fff9c7d9a865574642

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c1:1b:37:20:61:63:fd:0b:b0:5d:3b:38:b1:5a:5e:f1:cf:3b:60:a4:cc:8e:4e:e3:c6:27:f3:27:6e:5a:b5:1aSigner

Signature Validations

Verification

28-01-2022 11:50 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 39KB

.rdata Size: - Virtual size: 5KB

.data Size: - Virtual size: 3KB

.CRT Size: - Virtual size: 4B

.5`= Size: - Virtual size: 3.8MB

.X^f Size: 1024B - Virtual size: 872B

.Y?" Size: 6.8MB - Virtual size: 6.8MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 185KB - Virtual size: 184KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c1:1b:37:20:61:63:fd:0b:b0:5d:3b:38:b1:5a:5e:f1:cf:3b:60:a4:cc:8e:4e:e3:c6:27:f3:27:6e:5a:b5:1a
Signer

28-01-2022 11:50
Valid: true

.text
Size: - Virtual size: 39KB

.rdata
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 3KB

.CRT
Size: - Virtual size: 4B

.5`=
Size: - Virtual size: 3.8MB

.X^f
Size: 1024B - Virtual size: 872B

.Y?"
Size: 6.8MB - Virtual size: 6.8MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 185KB - Virtual size: 184KB