7015fbdaf29d7d5e6bfea27eea9c2170ee3529d86a511879546ef6f35e541a17

Resubmissions

10-09-2022 00:29

220910-as2ggsdaep 5

08-09-2022 03:39

220908-d72mksaffn 5

Sharing

Copy URL

Twitter E-mail

General

Target

7015fbdaf29d7d5e6bfea27eea9c2170ee3529d86a511879546ef6f35e541a17
Size

1.4MB
MD5

cc7b6604005e590f0ee9b105ed3dd767
SHA1

844ea247301dbbafae5319c5b7edb19f6ce847fd
SHA256

7015fbdaf29d7d5e6bfea27eea9c2170ee3529d86a511879546ef6f35e541a17
SHA512

7e80c05ffb82c5c5d1e2b4c50adb00d08f9561b2a8075dd2037deca3d2ac1aa8c6296fc5cfd1a49b02f60541f3397d150809c35bd376a2e2cae09d8c11756bc2
SSDEEP

24576:h2yUkglOMURTG95l1g6dvPL91gb7lZFNhZHf8UBh+pSfxNiwijllKd3eoI4:8OMgTs5TgAP4B3lEUaeiHGOoR

Score

N/A

Malware Config

Signatures

Files

7015fbdaf29d7d5e6bfea27eea9c2170ee3529d86a511879546ef6f35e541a17
.exe windows x86

8753cd352cfc32749e4772dadbaaeb91

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:5f:a6:a2:8c:67:99:df:3f:58:82:37:15:f9:aa:e8
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15-03-2022 00:00

Not After

14-03-2025 23:59

Subject

CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmö,ST=Skåne län,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:1b:c6:29:fb:d4:b7:24:56:52:f6:17:10:4f:33:60:b8:2d:74:96:ce:34:eb:79:6f:47:28:19:93:1e:f1:93
Signer

Actual PE Digest

29:1b:c6:29:fb:d4:b7:24:56:52:f6:17:10:4f:33:60:b8:2d:74:96:ce:34:eb:79:6f:47:28:19:93:1e:f1:93

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmö,ST=Skåne län,C=SE

26-07-2022 09:53
Valid: true

Chain 1

CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmö,ST=Skåne län,C=SE

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation
IsValidSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityInfo
OpenProcessToken

kernel32

GetCurrentProcess
CloseHandle
FreeConsole
CreateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
EncodePointer
DecodePointer
InitializeCriticalSectionEx
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
CreateFileW
RaiseException
RtlUnwind
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetFileType
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
WriteConsoleW

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

8753cd352cfc32749e4772dadbaaeb91

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:5f:a6:a2:8c:67:99:df:3f:58:82:37:15:f9:aa:e8Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

29:1b:c6:29:fb:d4:b7:24:56:52:f6:17:10:4f:33:60:b8:2d:74:96:ce:34:eb:79:6f:47:28:19:93:1e:f1:93Signer

Signature Validations

Verification

26-07-2022 09:53 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 233KB - Virtual size: 233KB

.rdata Size: 90KB - Virtual size: 89KB

.data Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 9KB - Virtual size: 8KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:5f:a6:a2:8c:67:99:df:3f:58:82:37:15:f9:aa:e8
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

29:1b:c6:29:fb:d4:b7:24:56:52:f6:17:10:4f:33:60:b8:2d:74:96:ce:34:eb:79:6f:47:28:19:93:1e:f1:93
Signer

26-07-2022 09:53
Valid: true

.text
Size: 233KB - Virtual size: 233KB

.rdata
Size: 90KB - Virtual size: 89KB

.data
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 9KB - Virtual size: 8KB