PCOptimizerProInstaller[.]exe

Resubmissions

05/11/2023, 22:08

231105-12leqsfb63 3

05/11/2023, 22:02

231105-1xtwbafa86 3

05/11/2023, 20:53

231105-zpgeksce4w 3

Sharing

Copy URL

Twitter E-mail

General

Target

PCOptimizerProInstaller.exe
Size

618KB
MD5

5ffeadad118403d9496653dce94300cc
SHA1

c96574ebffd8fc82bc6b4bf40bf306b5602b38e7
SHA256

9bee3eb4c6544d6e69543440bec4f1f246fad1e17067bb6e8bfd6daac7ce475f
SHA512

76726b8a982c53cac62068a9b9531918b0230537e526f517634d14cf9459fde69303c83067cbee50b4005b9fe55108ace1a2eda980922c46925cfc8aabe59e3c
SSDEEP

12288:yQedCPNdZcATixDKoIkQKlXcMW0s9C7w3zXBtd:NtBcATiflMMyA7w3zxtd

Score

1^/10

Malware Config

Signatures

Files

PCOptimizerProInstaller.exe
.exe windows:5 windows x86

3132cc27465cf3c5d91187b283e436be

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

05/05/2015, 00:00

Not After

31/12/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9a
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

31/10/2013, 00:00

Not After

30/10/2016, 23:59

Subject

CN=Xportsoft Technologies,O=Xportsoft Technologies,POSTALCODE=133001,STREET=Near Gugga Maadi\, Kardhan Road+STREET=Khojkipur,L=Ambala Cantt,ST=Haryana,C=IN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:68:68:3d:eb:82:a6:5d:ee:b4:33:d7:a9:6f:62:22:d5:77:51:33
Signer

Actual PE Digest

43:68:68:3d:eb:82:a6:5d:ee:b4:33:d7:a9:6f:62:22:d5:77:51:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
RaiseException
ExitThread
CreateThread
ExitProcess
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
SetEnvironmentVariableA
TerminateProcess
GetStartupInfoW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
lstrlenA
GlobalFlags
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedIncrement
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GlobalAlloc
FreeLibrary
InterlockedDecrement
MulDiv
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcessId
GetModuleFileNameW
SetLastError
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
FreeResource
GetProcAddress
GetTickCount
GetModuleHandleW
GetCurrentProcess
LocalFree
FormatMessageW
GetDiskFreeSpaceExW
GetVersionExW
ExpandEnvironmentStringsW
DeleteFileW
GetLastError
lstrlenW
Sleep
OutputDebugStringW
WaitForSingleObject
LockResource
SizeofResource
LoadResource
FindResourceW

user32

GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
GetWindowDC
ReleaseDC
GetDC
ScreenToClient
GrayStringW
DrawTextW
TabbedTextOutW
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
InflateRect
CopyRect
EndPaint
ClientToScreen
BeginPaint
AdjustWindowRectEx
GetDlgCtrlID
GetWindow
MoveWindow
GetSystemMenu
IsIconic
PostMessageW
DrawIcon
LoadIconW
AppendMenuW
GetSystemMetrics
GetWindowLongW
SetWindowLongW
SetCursor
InvalidateRgn
SetTimer
GetWindowRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
UnregisterClassW
SetCapture
KillTimer
GetParent
PtInRect
OffsetRect
InvalidateRect
GetSysColor
IsWindow
ReleaseCapture
UpdateWindow
MessageBoxW
SendMessageW
FillRect
PostThreadMessageW
GetClientRect
LoadBitmapW
EnableWindow
RegisterClipboardFormatW
MessageBeep
GetNextDlgGroupItem
GetActiveWindow
LoadCursorW
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CharNextW
GetMessageW
TranslateMessage
GetCursorPos
GetClassLongW
CharUpperW
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
DrawTextExW
CallNextHookEx
ValidateRect

gdi32

RestoreDC
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
SetMapMode
GetClipBox
SetTextAlign
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
OffsetViewportOrgEx
SetViewportExtEx
SaveDC
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetDeviceCaps
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetRgnBox
SelectObject
CreateBitmap
CreateFontW
GetTextExtentPointA
GetTextMetricsA
GetViewportOrgEx
SetViewportOrgEx
DeleteObject
GetStockObject
CreateFontIndirectW
CreateCompatibleBitmap
StretchBlt
BitBlt
CreateCompatibleDC
ScaleViewportExtEx
CreateSolidBrush
GetObjectW

msimg32

AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

shell32

SHGetFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW

oledlg

OleUIBusyW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysStringLen
SysFreeString

wininet

InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW

Sections

.text
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

3132cc27465cf3c5d91187b283e436be

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6Certificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9aCertificate

Extended Key Usages

Key Usages

43:68:68:3d:eb:82:a6:5d:ee:b4:33:d7:a9:6f:62:22:d5:77:51:33Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 263KB - Virtual size: 263KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 215KB - Virtual size: 215KB

.reloc Size: 43KB - Virtual size: 42KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9a
Certificate

43:68:68:3d:eb:82:a6:5d:ee:b4:33:d7:a9:6f:62:22:d5:77:51:33
Signer

.text
Size: 263KB - Virtual size: 263KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 215KB - Virtual size: 215KB

.reloc
Size: 43KB - Virtual size: 42KB