MSIAfterburnerSetup[.]zip

Resubmissions

19/03/2023, 02:49

230319-da5mzaef22

19/03/2023, 02:41

230319-c6rwbagf4y7

Sharing

Copy URL Twitter E-mail

General

Target
MSIAfterburnerSetup.zip
Size 53.1MB
Sample230319-c6rwbagf4y
SHA256 d1c09f505d9483e93df5126241c209e8c871656493ce511b3238df73b3eee71f
MD5 9c3fd7a0d7c4337574c3e34a733b3e67
SHA1 dabf90b53c9c142343b2da3f271d4c0dca6de38a
SHA512 0afe8193a8920ccb8f4cab1e67cfe9631a631381270e879c4069db5816f1381ff7bc3364463c6adf4d2fe198261217f537ef232e07fefae79941e7a83293d758
SSDEEP 1572864:er2Ykzg8UuHM1q1/FtdsKv2yQbWfMmJKpKMxa:Pj08o1qPfv2BR0Mxa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

MSIAfterburnerSetup.zip

.zip 53.1MB
MSIAfterburnerSetup465Beta4.exe

.exe 53.4MB

MSIAfterburnerSetup.zip

SHA256 d1c09f505d9483e93df5126241c209e8c871656493ce511b3238df73b3eee71f
MD5 9c3fd7a0d7c4337574c3e34a733b3e67
SHA1 dabf90b53c9c142343b2da3f271d4c0dca6de38a
SHA512 0afe8193a8920ccb8f4cab1e67cfe9631a631381270e879c4069db5816f1381ff7bc3364463c6adf4d2fe198261217f537ef232e07fefae79941e7a83293d758
SSDEEP 1572864:er2Ykzg8UuHM1q1/FtdsKv2yQbWfMmJKpKMxa:Pj08o1qPfv2BR0Mxa
MD5 SHA1 SHA512 SSDEEP

MSIAfterburnerSetup465Beta4.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 4ed693538994b649c5eda5f84daaadf9bf017b9d5ec99e5aacf25c8fd2fd75b5
MD5 85bffc78f283e9cdf26e1886ec945b12
SHA1 cdfb44817a2ae33706229922d339dc633b455388
SHA512 5371963919ef2b13ba5dc0f5d90e13857de76234bcba85f91e6ee8e9f585dc701334c371737f6917e461dc4296f0659071bab5ab9dece776294d7f4b075af6f9
SSDEEP 1572864:ZDyWOEc9XMwDUGt76mPxTGt76FPRX8i7kpOMPt:ZWLfFMwt7Zat7xZAMPt
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

c7:46:4e:d9:0d:44:76:af:44:70:a6:c2:99:ce:9d:93:d5:8f:4f:14

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 13, 2022 - Oct 16, 2025

Minor OS version

Major OS version

Entry point

13455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW