e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a.exe
Size 323KB
Sample231212-fa4f1sgda7
SHA256 e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a841c25e88253e6bdd24
MD5 e18c9d17e7a8f5ed5b6caa10b2feecf3
SHA1 b55210ea32da2e3bf804cd44a4c7d6f286e79fd5
SHA512 2a73b19c8280f35c7c5c552ff48cc141d6a8cdb03f379316374bc5a6051f0928f38e53f29536a7cd3a11db4d47498527fb6c53c3d3550a4faf5a252e6826476d
SSDEEP 3072:0qWb38YthRBMysjoeieOc7vJ46C352Mp80GmtqzLolIZ3TexScDs+/b7lMIS640d:P48YrRo1bvJ1C351pSrslI3On/bs6gy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a.exe

.exe 323KB

e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a.exe

IMPHASH 6adabf5929912c81c518ab88933ce307
SHA256 e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a841c25e88253e6bdd24
MD5 e18c9d17e7a8f5ed5b6caa10b2feecf3
SHA1 b55210ea32da2e3bf804cd44a4c7d6f286e79fd5
SHA512 2a73b19c8280f35c7c5c552ff48cc141d6a8cdb03f379316374bc5a6051f0928f38e53f29536a7cd3a11db4d47498527fb6c53c3d3550a4faf5a252e6826476d
SSDEEP 3072:0qWb38YthRBMysjoeieOc7vJ46C352Mp80GmtqzLolIZ3TexScDs+/b7lMIS640d:P48YrRo1bvJ1C351pSrslI3On/bs6gy
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

62:c9:c2:d0:91:fe:29:bb:59:8d:a2:85:af:28:aa:00:bf:09:f6:e3:be:f7:75:46:ae:1f:f2:f2:45:f3:f2:c8

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Chains

Dec 4, 2023

SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Serial Number

0f:ab:67:0a:61:bf:4b:7d:af:d5:59:35:6b:5b:cc:ff

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 4, 2023 - Oct 3, 2024

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

20576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW GetStringTypeA FreeConsole GetModuleHandleA VirtualAlloc LoadLibraryA VirtualProtect GetProcAddress lstrlenW Sleep CreateThread GetLocaleInfoA WaitForSingleObject RtlUnwind RaiseException GetCommandLineA GetLastError HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar LCMapStringW

user32

GetClassInfoA CallWindowProcA SetWindowLongA IsDlgButtonChecked SetWindowTextA CheckDlgButton GetActiveWindow LoadCursorA MessageBoxA wsprintfA GetDlgItemTextA

gdi32

GetStockObject DeleteObject SetBkMode SetTextColor CreateFontIndirectA SelectObject GetObjectA

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

RegDeleteKeyA

Sharing

General

Malware Config

Signatures

File Explorer

e2ca778df1ceb5c82033642a14a8a0c4e97dd2855c81a.exe

PE Signature issue

kernel32

user32

gdi32

comdlg32

advapi32

generic