Docker-Setup-2[.]10[.]18[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Docker-Setup-2.10.18.exe
Size

25.4MB
MD5

047d640555ce380f6532d68960afed6f
SHA1

e8f7edd73d5bfb39f9f9576fd9f06bdcc147a086
SHA256

68393678ccf5bdc8d7075290a5ee4da24c878a6b11f45cf2342c442ca9aa09ca
SHA512

efc2a28eb5516f75fbe0558404a58cecd982b27fc3182859c40882a5eb595de58c886f5eb9d02ffc6cb2701a0f882ce032de71f2e1f2041f2da1c3ba7613128b
SSDEEP

393216:ean14RbLyxekCfX2XmaxYSFmMF4FxUhIGckCK/COD1NOf8NPqV:eAMVhHI/F44hIbO/CG1NOf8NPqV

Score

1^/10

Malware Config

Signatures

Files

Docker-Setup-2.10.18.exe
.exe windows x64

22a71214a0c9214caa6b4dfa0b409cb5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:ca
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

01/11/2021, 00:00

Not After

31/10/2024, 23:59

Subject

SERIALNUMBER=91110108MA01C3DB41,CN=Beijing Zhi Liang Technology Co.\, Ltd,O=Beijing Zhi Liang Technology Co.\, Ltd,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:ca
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

01/11/2021, 00:00

Not After

31/10/2024, 23:59

Subject

SERIALNUMBER=91110108MA01C3DB41,CN=Beijing Zhi Liang Technology Co.\, Ltd,O=Beijing Zhi Liang Technology Co.\, Ltd,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2d:0e:8a:96:21:db:d2:f7:99:4e:65:35:ff:b2:5c:7c:ef:8a:f5:d9:2f:98:a5:15:17:87:07:a3:ae:a8:b5:36
Signer

Actual PE Digest

2d:0e:8a:96:21:db:d2:f7:99:4e:65:35:ff:b2:5c:7c:ef:8a:f5:d9:2f:98:a5:15:17:87:07:a3:ae:a8:b5:36

Digest Algorithm

sha256

PE Digest Matches

false

7d:69:d2:7d:ee:2c:bb:69:64:b8:00:47:a9:64:b4:a4:eb:42:d0:6c
Signer

Actual PE Digest

7d:69:d2:7d:ee:2c:bb:69:64:b8:00:47:a9:64:b4:a4:eb:42:d0:6c

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetSystemMetrics

kernel32

FindResourceW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

CryptCreateHash

shell32

ShellExecuteExW

ole32

CoInitializeEx

crypt32

CryptDecodeObjectEx

ws2_32

WSAWaitForMultipleEvents

bcrypt

BCryptGenRandom

oleaut32

SysStringLen

Sections

.text
Size: - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.u+:
Size: - Virtual size: 15.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.:@r
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZqV
Size: 25.4MB - Virtual size: 25.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22a71214a0c9214caa6b4dfa0b409cb5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:caCertificate

Extended Key Usages

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:caCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

2d:0e:8a:96:21:db:d2:f7:99:4e:65:35:ff:b2:5c:7c:ef:8a:f5:d9:2f:98:a5:15:17:87:07:a3:ae:a8:b5:36Signer

7d:69:d2:7d:ee:2c:bb:69:64:b8:00:47:a9:64:b4:a4:eb:42:d0:6cSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

shell32

ole32

crypt32

ws2_32

bcrypt

oleaut32

Sections

.text Size: - Virtual size: 638KB

.rdata Size: - Virtual size: 180KB

.data Size: - Virtual size: 10KB

.pdata Size: - Virtual size: 22KB

_RDATA Size: - Virtual size: 348B

.u+: Size: - Virtual size: 15.4MB

.:@r Size: 4KB - Virtual size: 3KB

.ZqV Size: 25.4MB - Virtual size: 25.4MB

.rsrc Size: 15KB - Virtual size: 15KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:ca
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

82:bd:f2:c6:f8:d1:85:5c:e4:7f:e4:e6:aa:46:5c:ca
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

2d:0e:8a:96:21:db:d2:f7:99:4e:65:35:ff:b2:5c:7c:ef:8a:f5:d9:2f:98:a5:15:17:87:07:a3:ae:a8:b5:36
Signer

7d:69:d2:7d:ee:2c:bb:69:64:b8:00:47:a9:64:b4:a4:eb:42:d0:6c
Signer

.text
Size: - Virtual size: 638KB

.rdata
Size: - Virtual size: 180KB

.data
Size: - Virtual size: 10KB

.pdata
Size: - Virtual size: 22KB

_RDATA
Size: - Virtual size: 348B

.u+:
Size: - Virtual size: 15.4MB

.:@r
Size: 4KB - Virtual size: 3KB

.ZqV
Size: 25.4MB - Virtual size: 25.4MB

.rsrc
Size: 15KB - Virtual size: 15KB