setup_id003[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

setup_id003.bin
Size

2.1MB
MD5

e8d445f362ba21571cdb980d1e05318c
SHA1

48e5510219ca6581ce6a0f15d98cc26a13e60151
SHA256

0d3525646b203ddd5fc2d4b46dcec1e0aff05dc8cd4a42cbc8830dc767d5390c
SHA512

a122a55380fa8ffd0cefd0c3217d615046c02a25a54b1efc65d43ef9b347afed7205a810fc45f87437cf333a6d5b020f788378cb41b48f8667e0b95557db4f86
SSDEEP

49152:4MNAkF0x0PTpC6vpnenyB4EN19JIF4xNmu:4MWkF06rp3RneyVN1Ts47mu

Score

1^/10

Malware Config

Signatures

Files

setup_id003.bin
.exe windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:54:89:e9:9e:fc:42:da:91:99:af:86:4a:e6:f3:57
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

11/04/2023, 00:00

Not After

10/04/2026, 23:59

Subject

CN=LUMICNS Co.\,Ltd,O=LUMICNS Co.\,Ltd,ST=Gyeonggi-do,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:af:f8:54:94:ac:68:5c:70:cf:e5:89:dd:ae:d8:d7:2d:fb:17:70
Signer

Actual PE Digest

65:af:f8:54:94:ac:68:5c:70:cf:e5:89:dd:ae:d8:d7:2d:fb:17:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

Size: 1.0MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

irufcawm
Size: 1001KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xrppsmld
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

4e:54:89:e9:9e:fc:42:da:91:99:af:86:4a:e6:f3:57Certificate

Extended Key Usages

Key Usages

65:af:f8:54:94:ac:68:5c:70:cf:e5:89:dd:ae:d8:d7:2d:fb:17:70Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Exports

Exports

Sections

Size: 1.0MB - Virtual size: 2.8MB

.rsrc Size: 29KB - Virtual size: 429KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 820KB

irufcawm Size: 1001KB - Virtual size: 1004KB

xrppsmld Size: 512B - Virtual size: 4KB

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

4e:54:89:e9:9e:fc:42:da:91:99:af:86:4a:e6:f3:57
Certificate

65:af:f8:54:94:ac:68:5c:70:cf:e5:89:dd:ae:d8:d7:2d:fb:17:70
Signer

.rsrc
Size: 29KB - Virtual size: 429KB

.idata
Size: 512B - Virtual size: 4KB

irufcawm
Size: 1001KB - Virtual size: 1004KB

xrppsmld
Size: 512B - Virtual size: 4KB