Setup_Win_26-01-2023_17-03-10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Setup_Win_26-01-2023_17-03-10.exe
Size 700.3MB
Sample230126-yxl5csfc59
SHA256 0a42933423b4f895036e70afc07ab21cf59b0f812471e98cb74fb09d6e8c6e8a
MD5 faefa24609e44cbf05b476a86c4fddd7
SHA1 59edcee0e403b50b839676132b957ad085a09043
SHA512 f21e1608883383e4075c74dd10067647fd83532d027506dd7c76df25765b057e3ee891990e1869e75f9c75679efa64e85b16fb58b30dc98ad532fd967d14e83c
SSDEEP 3072:Spamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJa97FeZfSQ:ka0VR18diGkZOO6LVvWQ/yEUrSUMh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

Setup_Win_26-01-2023_17-03-10.exe

.exe 700.3MB

Setup_Win_26-01-2023_17-03-10.exe

IMPHASH 15cba4fc4e4b1ecfcaea326b4330c631
SHA256 0a42933423b4f895036e70afc07ab21cf59b0f812471e98cb74fb09d6e8c6e8a
MD5 faefa24609e44cbf05b476a86c4fddd7
SHA1 59edcee0e403b50b839676132b957ad085a09043
SHA512 f21e1608883383e4075c74dd10067647fd83532d027506dd7c76df25765b057e3ee891990e1869e75f9c75679efa64e85b16fb58b30dc98ad532fd967d14e83c
SSDEEP 3072:Spamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJa97FeZfSQ:ka0VR18diGkZOO6LVvWQ/yEUrSUMh
MD5 SHA1 SHA512 SSDEEP

windows x64

Digest

3f:4d:31:80:f0:b8:b5:e7:8c:88:14:1d:cb:be:f5:a7:4e:de:e0:03:cb:e6:15:a4:da:c2:9f:71:1c:19:5a:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

SERIALNUMBER=389470690,CN=M-Trans Maciej Caban,O=M-Trans Maciej Caban,POSTALCODE=96-100,STREET=Sucharskiego 2 lok. 31,L=Skierniewice,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Serial Number

6e:44:fc:ed:d4:9f:22:f7:a2:8c:ec:c9:91:04:f6:1a

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 5, 2023 - Jan 5, 2024

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

Major OS version

Entry point

20448

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

glu32

gluLookAt gluPerspective gluBuild2DMipmaps

opengl32

wglDeleteContext wglMakeCurrent wglCreateContext glFlush glDisable glTexEnvi glTexParameteri glEnable glGenTextures glDeleteTextures glEnd glVertex3f glTexCoord2f glBegin glCallLists glListBase glGetString wglGetCurrentDC wglGetProcAddress glViewport glLoadIdentity glMatrixMode glPopMatrix glColor4f glRotatef glTranslatef glScalef glPushMatrix glBlendFunc glDeleteLists wglUseFontOutlinesA glClearColor glClear glHint glCullFace glColor3fv glVertex3fv glBindTexture

kernel32

GetCommandLineA LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA HeapReAlloc InitializeCriticalSection GetLocaleInfoA MultiByteToWideChar LoadLibraryA GetOEMCP GetACP GetCPInfo EnterCriticalSection LeaveCriticalSection HeapSize Sleep GetSystemTimeAsFileTime GetCurrentProcessId LockResource LoadResource FindResourceA GetTickCount QueryPerformanceCounter QueryPerformanceFrequency HeapCreate HeapSetInformation DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA ExitProcess GetModuleFileNameA GetStdHandle WriteFile FlsAlloc GetCurrentThreadId SetLastError FlsFree TlsFree FlsSetValue FlsGetValue GetModuleHandleA GetProcAddress GetLastError RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RaiseException RtlPcToFileHeader HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind

user32

PostQuitMessage MessageBoxW MessageBoxA DestroyWindow DispatchMessageA TranslateMessage PeekMessageA SetWindowLongA SetWindowTextA ReleaseDC GetDC CreateWindowExA GetClientRect GetWindowLongA EndPaint BeginPaint DefWindowProcA RegisterClassExA LoadCursorA GetClassInfoExA CallWindowProcA

gdi32

ChoosePixelFormat SwapBuffers DeleteObject SelectObject CreateFontA SetPixelFormat