osu!install-20210423[.]2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

osu!install-20210423.2.exe
Size

4.2MB
MD5

5c572b72078aecc8e66f46729f07d771
SHA1

933850f35dc4c43b2ebc91c35449091deb8e2de2
SHA256

58eff9a415b6d8d46fc8b6bd006dbffb81e545fe964c2d11d337b8f1838fb8a9
SHA512

4cb19d63fb7022428d5376e1f82e74fd64f7d78a1ed148e353eecd532456254b306252ca2f2e6070d43e506850f0e484c1dd6b7d54ffba9c796234d70178e493
SSDEEP

98304:WofZbNsLT/fNUDF37Vt22drLwJ6xRxpDOha:W3TnqDF/2wXwIia

Score

1^/10

Malware Config

Signatures

Files

osu!install-20210423.2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-09-2018 00:00

Not After

27-09-2021 23:59

Subject

CN=Dean Herbert,O=Dean Herbert,POSTALCODE=6014,STREET=Wembley+STREET=41 Gregory Street,L=Perth,ST=WA,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-09-2018 00:00

Not After

27-09-2021 23:59

Subject

CN=Dean Herbert,O=Dean Herbert,POSTALCODE=6014,STREET=Wembley+STREET=41 Gregory Street,L=Perth,ST=WA,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fc:71:5e:db:72:85:0d:5e:bc:b9:45:f1:5b:92:fd:25:bf:4c:7d:8b:52:db:63:74:41:b4:bf:c1:c9:5d:20:f4
Signer

Actual PE Digest

fc:71:5e:db:72:85:0d:5e:bc:b9:45:f1:5b:92:fd:25:bf:4c:7d:8b:52:db:63:74:41:b4:bf:c1:c9:5d:20:f4

Digest Algorithm

sha256

PE Digest Matches

true

99:de:1c:8a:74:db:55:e5:50:54:9d:e8:6a:10:70:36:af:04:33:a3
Signer

Actual PE Digest

99:de:1c:8a:74:db:55:e5:50:54:9d:e8:6a:10:70:36:af:04:33:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

fc:71:5e:db:72:85:0d:5e:bc:b9:45:f1:5b:92:fd:25:bf:4c:7d:8b:52:db:63:74:41:b4:bf:c1:c9:5d:20:f4Signer

99:de:1c:8a:74:db:55:e5:50:54:9d:e8:6a:10:70:36:af:04:33:a3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rsrc Size: 192KB - Virtual size: 191KB

.reloc Size: 512B - Virtual size: 12B

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

07:74:07:5d:3a:43:e2:b1:85:b5:c0:58:93:c6:d1:b4
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

fc:71:5e:db:72:85:0d:5e:bc:b9:45:f1:5b:92:fd:25:bf:4c:7d:8b:52:db:63:74:41:b4:bf:c1:c9:5d:20:f4
Signer

99:de:1c:8a:74:db:55:e5:50:54:9d:e8:6a:10:70:36:af:04:33:a3
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rsrc
Size: 192KB - Virtual size: 191KB

.reloc
Size: 512B - Virtual size: 12B