DiskInfo64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

DiskInfo64.exe
Size

2.7MB
MD5

e582b7d55c4783f83d1842249fc42cec
SHA1

989e4a2864bbf8dffc8ec60d0044c87b19db0824
SHA256

b4971ebbf578761c01535fd47d28550ed948f2e4f6f12ce756f3612bae64d5e4
SHA512

e67218494db2f7c3eb4b2f244cc8b686de44ceb126bad3754635b5c843fbd56a5e61bc0ed82b227eb7e780ea9ba2f0b806b7161fcebee8f7559a88ab55f2b377
SSDEEP

49152:JmAwbLw30g0SLke4U+j+bAE1x9nmnM4atqZdd1v+0Krb4:g8x9nmnM4aqTPKrb4

Score

N/A

Malware Config

Signatures

Files

DiskInfo64.exe
.exe windows x64

7d47aa1e01202687c9ce898a475f222c

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16/03/2016, 00:00

Not After

16/03/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/12/2018, 03:04

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

72:49:13:98:10:b1:50:f1:56:d7:7c:3d
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign TSA for Standard - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01/09/1998, 12:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

07/12/2018, 04:22

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

83:c7:bb:ee:01:ee:dc:e3:84:b3:2b:1c:ba:4a:53:43:67:4a:7b:53:23:49:5f:6d:cf:ee:32:d5:73:17:0a:60
Signer

Actual PE Digest

83:c7:bb:ee:01:ee:dc:e3:84:b3:2b:1c:ba:4a:53:43:67:4a:7b:53:23:49:5f:6d:cf:ee:32:d5:73:17:0a:60

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

23/02/2021, 02:48
Valid: true

Chain 1

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

32:2a:72:80:72:29:10:b9:2d:8c:19:6e:3c:80:fd:90:7b:d8:89:f6
Signer

Actual PE Digest

32:2a:72:80:72:29:10:b9:2d:8c:19:6e:3c:80:fd:90:7b:d8:89:f6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

23/02/2021, 02:48
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetUserDefaultUILanguage
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateEventW
SetEvent
GetCurrentProcessId
lstrcmpA
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
SetLastError
OutputDebugStringA
GetACP
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
GetWindowsDirectoryW
GetCurrentProcess
FindClose
FindNextFileW
FindFirstFileW
lstrlenW
lstrcmpW
VirtualProtect
LoadLibraryExW
GetTimeZoneInformation
GetModuleHandleW
GetProcAddress
GetTickCount
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
GetLocalTime
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
GetVersionExW
CreateDirectoryW
GetPrivateProfileStringW
CreateMutexW
Sleep
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount

user32

RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetMenuItemCount
GetMenuItemID
GetParent
OffsetRect
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
InvalidateRect
RemovePropW
SendDlgItemMessageA
AdjustWindowRect
GetWindowInfo
UnregisterClassW
PrintWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromWindow
ReleaseDC
GetDC
SetPropW
SystemParametersInfoW
FillRect
LoadCursorW
SetCursor
CopyRect
FrameRect
SetScrollPos
AdjustWindowRectEx
MessageBoxW
ScreenToClient
MapWindowPoints
GetSysColor
EqualRect
PtInRect
GetWindowLongPtrW
SetWindowLongPtrW
GetClassLongPtrW
GetScrollPos
SetScrollRange
AppendMenuW
RemoveMenu
GetClassNameW
GetTopWindow
GetLastActivePopup
SetWindowsHookExW
DrawTextExW
UnhookWindowsHookEx
CallNextHookEx
GetPropW
EnableWindow
RegisterWindowMessageW
LoadIconW
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
SendMessageW
GetSystemMetrics
GetClientRect
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
DrawMenuBar
GetMenuState
GetWindowRect
WaitForInputIdle
KillTimer
SetTimer
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterDeviceNotificationW
MonitorFromRect
LoadImageW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
CreateMenu
InsertMenuItemW
wsprintfW
PostQuitMessage
RegisterClipboardFormatW
GetMessageW
TranslateMessage
WinHelpW
GetMonitorInfoW
ModifyMenuW
EnableMenuItem
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
SetWindowContextHelpId
IsRectEmpty
SetRect
InvalidateRgn
DrawTextW
CharNextW
IntersectRect
PostThreadMessageW
ReleaseCapture
SetCapture
MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
CharUpperW
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
SetMenuItemBitmaps
CopyAcceleratorTableW

gdi32

Escape
GetClipBox
GetStockObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SetBkMode
SetMapMode
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
GetRgnBox
CreateRectRgnIndirect
CreateBitmap
SetBkColor
CreatePatternBrush
GetBkColor
GetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
SetBitmapBits
GetBitmapBits
GetObjectW
SetDIBColorTable
SelectObject
DeleteObject
CreateDIBSection
BitBlt
CreateCompatibleDC
TextOutW
DeleteDC
EnumFontFamiliesExW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegisterEventSourceW
RegSetValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
DeregisterEventSource
ReportEventW
RegCreateKeyExW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey

shell32

ShellExecuteW
ord680
Shell_NotifyIconW
CommandLineToArgvW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx
_TrackMouseEvent

shlwapi

UrlCreateFromPathW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
SHDeleteKeyW
PathFindExtensionW

uxtheme

SetWindowTheme

ole32

CoInitialize
OleUninitialize
CoGetClassObject
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CLSIDFromString
OleInitialize

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
DispCallFunc
LoadRegTypeLi
VariantCopy
VariantChangeType
SysAllocStringLen
SafeArrayGetElement
SysFreeString
SysAllocString
VariantClear
VariantInit
OleCreateFontIndirect
SysStringLen

gdiplus

GdipBitmapUnlockBits
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageHeight
GdipCloneImage
GdipGetImageWidth
GdipBitmapLockBits

winmm

mciSendCommandW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

cfgmgr32

CM_Get_Device_IDW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 846KB - Virtual size: 845KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d47aa1e01202687c9ce898a475f222c

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51Certificate

Extended Key Usages

Key Usages

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7Certificate

Extended Key Usages

Key Usages

72:49:13:98:10:b1:50:f1:56:d7:7c:3dCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:15:4b:5a:c3:94Certificate

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

11:22:cc:70:33:77:a3:42:7c:93:a9:8dCertificate

Extended Key Usages

Key Usages

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

83:c7:bb:ee:01:ee:dc:e3:84:b3:2b:1c:ba:4a:53:43:67:4a:7b:53:23:49:5f:6d:cf:ee:32:d5:73:17:0a:60Signer

Signature Validations

Verification

23/02/2021, 02:48 Valid: true

Chain 1

32:2a:72:80:72:29:10:b9:2d:8c:19:6e:3c:80:fd:90:7b:d8:89:f6Signer

Signature Validations

Verification

23/02/2021, 02:48 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

version

cfgmgr32

setupapi

oleacc

Sections

.text Size: 846KB - Virtual size: 845KB

.rdata Size: 286KB - Virtual size: 285KB

.data Size: 18KB - Virtual size: 63KB

.pdata Size: 34KB - Virtual size: 33KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 1.5MB - Virtual size: 1.5MB

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

72:49:13:98:10:b1:50:f1:56:d7:7c:3d
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

83:c7:bb:ee:01:ee:dc:e3:84:b3:2b:1c:ba:4a:53:43:67:4a:7b:53:23:49:5f:6d:cf:ee:32:d5:73:17:0a:60
Signer

23/02/2021, 02:48
Valid: true

32:2a:72:80:72:29:10:b9:2d:8c:19:6e:3c:80:fd:90:7b:d8:89:f6
Signer

23/02/2021, 02:48
Valid: false

.text
Size: 846KB - Virtual size: 845KB

.rdata
Size: 286KB - Virtual size: 285KB

.data
Size: 18KB - Virtual size: 63KB

.pdata
Size: 34KB - Virtual size: 33KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1.5MB - Virtual size: 1.5MB