setup_PPSD__V2023_SP[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

setup_PPSD__V2023_SP.exe
Size

134.6MB
MD5

f4b4643b6c886dd5dc52c83f97dbfa92
SHA1

0ebc3212641fb18d405aa54eca5ead8889f7e489
SHA256

71627e08c62c2c0af9f9b600bfd6fcdff3d05fe7c16fbda3357ad08fcc35cbb2
SHA512

3e1a4d2a1e88a7baf9194e6e25c4a7b0c9d0513304bfbd033d577620ec769f7ff39d7f13088a0eaa213481e6f06f7a9650d469b9c04fdfe17703a0e3f01f71c1
SSDEEP

3145728:9+UJTJh31dF8tA4DMS7T3GUaqhg70IJE8BIoH1nCzOMgZviijVnV:Eqhp2A4z7LaRpJE8BUzORr

Score

1^/10

Malware Config

Signatures

Files

setup_PPSD__V2023_SP.exe
.exe windows x86

d221b1dc8c3a08622f6512e7876527c8

Code Sign

46:bf:d1:9c:91:2a:2d:84:ba:8c:44:ca:8d:c5:bc:42
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18/11/2019, 00:00

Not After

07/12/2023, 23:59

Subject

CN=KED Engineering GmbH,O=KED Engineering GmbH,POSTALCODE=63517,STREET=Talstrasse 3a,L=Rodenbach,ST=Hessen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

54:0b:67:87:58:4b:ef:41:97:a4:43:84:1e:7e:d5:b0:25:36:62:57
Signer

Actual PE Digest

54:0b:67:87:58:4b:ef:41:97:a4:43:84:1e:7e:d5:b0:25:36:62:57

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=KED Engineering GmbH,O=KED Engineering GmbH,POSTALCODE=63517,STREET=Talstrasse 3a,L=Rodenbach,ST=Hessen,C=DE

27/02/2023, 09:32
Valid: true

Chain 1

CN=KED Engineering GmbH,O=KED Engineering GmbH,POSTALCODE=63517,STREET=Talstrasse 3a,L=Rodenbach,ST=Hessen,C=DE

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d221b1dc8c3a08622f6512e7876527c8

Code Sign

46:bf:d1:9c:91:2a:2d:84:ba:8c:44:ca:8d:c5:bc:42Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

54:0b:67:87:58:4b:ef:41:97:a4:43:84:1e:7e:d5:b0:25:36:62:57Signer

Signature Validations

Verification

27/02/2023, 09:32 Valid: true

Chain 1

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.gentee Size: 76KB - Virtual size: 73KB

.rsrc Size: 60KB - Virtual size: 56KB

46:bf:d1:9c:91:2a:2d:84:ba:8c:44:ca:8d:c5:bc:42
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

54:0b:67:87:58:4b:ef:41:97:a4:43:84:1e:7e:d5:b0:25:36:62:57
Signer

27/02/2023, 09:32
Valid: true

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.gentee
Size: 76KB - Virtual size: 73KB

.rsrc
Size: 60KB - Virtual size: 56KB