SecuriteInfo[.]com[.]Heur[.]22725[.]24021[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Heur.22725.24021.exe
Size

1.2MB
MD5

2cef6ba9713b82296bc4aad6c232d491
SHA1

259e39f1ea222c939eaadddd63269703f6d125f6
SHA256

a2d45747788e0ae4845d1d4654e137ab8e254e49c0f00471e7c46c09d3fd2af2
SHA512

9d65dd9a77b0170178a611faf769479da7036bba8e031f4aeeaa76f1d62e4a304515b123dd46191000aa59516e2402eebbd3bc5b7bf7610438e1efd38cf66df2
SSDEEP

24576:bmthyr8dxD6Bm1bLSxlUzfD1McA68dQ9O93X0Hn7uUYoadN6I4LOr:6/yr26DaMdWDYZNB5

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Heur.22725.24021.exe
.exe windows:4 windows x86 arch:x86

b77c4af7e9860da921d4538877e289aa

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 09:33

Not After

27/07/2024, 09:33

Subject

SERIALNUMBER=15.06.2017,CN=Nenad Hrg,O=Nenad Hrg,STREET=Edelweissstrasse 104,L=Taufkirchen,ST=Bayern,C=DE,1.2.840.113549.1.9.1=#0c16737570706f727440736f6674776172656f6b2e636f6d,1.3.6.1.4.1.311.60.2.1.1=#130b546175666b69726368656e,1.3.6.1.4.1.311.60.2.1.2=#130642617965726e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:45

Not After

08/05/2033, 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b0:94:e5:ce:94:d3:c5:bf:7c:ac:50:83:b7:7f:25:ab:ab:88:5f:e4:89:3b:ae:7a:15:03:a3:a2:50:f1:3e:ef
Signer

Actual PE Digest

b0:94:e5:ce:94:d3:c5:bf:7c:ac:50:83:b7:7f:25:ab:ab:88:5f:e4:89:3b:ae:7a:15:03:a3:a2:50:f1:3e:ef

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RaiseException
GetFileType
GetStdHandle
SetHandleCount
CompareStringW
TlsGetValue
TlsAlloc
TlsSetValue
LCMapStringW
LCMapStringA
GetStringTypeA
HeapCreate
IsBadWritePtr
VirtualAlloc
VirtualFree
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
HeapSize
GetSystemTime
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
HeapAlloc
HeapReAlloc
SetEndOfFile
GetTempFileNameA
SetVolumeLabelA
HeapDestroy
CreateMutexA
GetProfileStringA
GetLocaleInfoA
GetNumberFormatA
GetEnvironmentVariableA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetFullPathNameA
GetDiskFreeSpaceA
GetUserDefaultLangID
GetSystemDirectoryA
TerminateProcess
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumDateFormatsA
EnumTimeFormatsA
GetModuleHandleW
GetShortPathNameA
GetPrivateProfileStringA
SizeofResource
GetLocalTime
GetFileSize
SetFilePointer
SetFileTime
WideCharToMultiByte
ReadFile
TerminateThread
GetLastError
GetCurrentProcessId
MoveFileA
MulDiv
GetTimeZoneInformation
lstrcpynW
GetLogicalDrives
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GlobalHandle
FreeResource
Sleep
CreateThread
ExitProcess
GetCurrentProcess
FlushInstructionCache
CompareStringA
SetLastError
lstrcpyA
FindResourceA
LoadResource
LockResource
GetLogicalDriveStringsA
GetDriveTypeA
GetFileAttributesA
lstrcmpiA
lstrcmpA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
CopyFileA
CreateDirectoryA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
RemoveDirectoryA
SetFileAttributesA
DeleteFileA
GetTempPathA
FreeLibrary
GetVersionExA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetWindowsDirectoryA
GetModuleHandleA
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
lstrcpynA
lstrlenA
LoadLibraryA
GetStringTypeW
GetProcAddress
InterlockedExchange

user32

SetForegroundWindow
GetIconInfo
CharUpperA
SetMenuDefaultItem
GetScrollPos
MoveWindow
SetScrollInfo
IsRectEmpty
IntersectRect
SetScrollPos
GetMenuDefaultItem
GetSystemMenu
SetRect
LoadBitmapA
TrackPopupMenuEx
DrawEdge
GetSysColorBrush
PeekMessageA
CallNextHookEx
IsMenu
WindowFromPoint
GetWindowThreadProcessId
SetMenuItemInfoA
MessageBeep
UnhookWindowsHookEx
SetWindowsHookExA
InsertMenuA
CheckMenuItem
EnableMenuItem
GetWindowDC
TranslateAcceleratorA
IsDialogMessageA
GetDoubleClickTime
GetMessagePos
SetWindowLongA
SendMessageA
CallWindowProcA
GetWindowLongA
wsprintfA
SetWindowTextA
SetTimer
ShowWindow
GetDlgItem
GetParent
LoadImageA
CreatePopupMenu
TrackPopupMenu
EqualRect
CreateDialogParamA
FrameRect
InflateRect
PostMessageA
CopyRect
IsWindowVisible
GetKeyState
SetClassLongA
ClientToScreen
AppendMenuA
SetParent
InvalidateRgn
CreateAcceleratorTableA
GetDesktopWindow
RedrawWindow
SetMenu
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
DeleteMenu
LoadIconA
GetMenuStringA
LoadStringW
RemoveMenu
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamA
GetClipboardData
SystemParametersInfoW
SetPropW
GetWindowPlacement
EnumWindows
mouse_event
MenuItemFromPoint
GetMenu
SetWindowPlacement
SetActiveWindow
GetMenuState
InsertMenuItemA
DispatchMessageA
GetSystemMetrics
GetFocus
FindWindowExA
KillTimer
RegisterClipboardFormatA
PostQuitMessage
EndDialog
GetClientRect
SetWindowPos
GetAsyncKeyState
EnumChildWindows
MapWindowPoints
SystemParametersInfoA
GetWindowRect
GetWindow
CharNextA
LoadStringA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnableWindow
ScreenToClient
SetDlgItemTextA
TranslateMessage
SetMenuItemBitmaps
keybd_event
MapVirtualKeyA
GetScrollInfo
DrawIcon
DrawAnimatedRects
DestroyIcon
ShowCaret
RemovePropA
GetPropA
SetPropA
GetMenuItemID
GetMessageA
SendMessageTimeoutA
DialogBoxIndirectParamA
IsWindowEnabled
GetSysColor
DrawFocusRect
FillRect
DrawTextA
OffsetRect
GetClassNameA
CreateCursor
GetWindowTextLengthA
GetCursorPos
SetCursor
EndPaint
BeginPaint
LoadMenuA
IsWindow
DestroyWindow
InvalidateRect
PtInRect
SetFocus
SetCapture
GetCapture
ReleaseCapture
UpdateWindow
IsZoomed
MessageBoxA
GetWindowTextA
GetDlgCtrlID
DialogBoxParamA
GetActiveWindow
CharLowerA
ReleaseDC
GetDC
GetMenuItemInfoA
DestroyMenu
GetMenuItemCount
GetSubMenu
CreateWindowExA
SetRectEmpty
DefWindowProcA
DestroyCursor
ScrollWindowEx
IsChild

gdi32

GetBkColor
DPtoLP
LPtoDP
SetPixel
Rectangle
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
SelectClipRgn
GetEnhMetaFileHeader
EndDoc
AbortDoc
EndPage
StartPage
ResetDCA
StartDocA
SetStretchBltMode
StretchBlt
GetCurrentObject
GetPixel
SetDIBitsToDevice
CreateEnhMetaFileA
CloseEnhMetaFile
CreateDCA
GetDIBits
GetClipBox
SetViewportOrgEx
CreateBitmap
CreatePatternBrush
PatBlt
GetTextExtentPoint32A
SaveDC
ExtTextOutA
RestoreDC
ExcludeClipRect
OffsetWindowOrgEx
SetWindowOrgEx
CreatePen
MoveToEx
LineTo
IntersectClipRect
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
SetBkMode
DeleteDC
CreateFontIndirectA
DeleteObject
GetObjectA
CreateDIBSection
CreateCompatibleDC
SelectObject
GetStockObject
SetBkColor
DeleteEnhMetaFile
CreateSolidBrush
SetTextColor

winspool.drv

GetPrinterA
ClosePrinter
OpenPrinterA

comdlg32

GetOpenFileNameA
PrintDlgA
ChooseColorA
PageSetupDlgA
GetSaveFileNameA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetTokenInformation
RegCloseKey

shell32

SHGetSpecialFolderLocation
ord21
SHGetMalloc
SHAppBarMessage
Shell_NotifyIconA
ord189
DragFinish
SHBrowseForFolderA
ord88
ExtractIconExA
ord68
SHGetSettings
ord25
DragQueryFileA
ord17
ord16
SHGetFileInfoA
SHFileOperationA
DragAcceptFiles
ord155
ord18
SHGetDesktopFolder
ord4
ord2
SHGetSpecialFolderPathA
ShellExecuteExA
SHGetPathFromIDListA
ShellExecuteA

ole32

OleDuplicateData
DoDragDrop
RegisterDragDrop
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
CoInitialize
CoUninitialize
OleSetClipboard
OleGetClipboard
RevokeDragDrop
CoSetProxyBlanket
CreateStreamOnHGlobal

oleaut32

VariantClear
SysAllocStringLen
VariantChangeType
OleCreatePictureIndirect
SysFreeString
VariantInit
OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
SysAllocString

comctl32

ImageList_LoadImageA
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetIcon
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Remove
ImageList_Destroy
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageInfo
ord6
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

msimg32

AlphaBlend

gdiplus

GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipSetCompositingMode
GdipImageSelectActiveFrame
GdipCreateBitmapFromStream
GdipImageRotateFlip
GdiplusStartup
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipCreateImageAttributes
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipSetImageAttributesGamma
GdipCreateHICONFromBitmap
GdipCreateFromHDC
GdipGetImageThumbnail
GdipGetPropertyItemSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP

winmm

PlaySoundA
timeGetTime

shlwapi

PathRelativePathToA

Sections

.text
Size: 648KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b77c4af7e9860da921d4538877e289aa

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

b0:94:e5:ce:94:d3:c5:bf:7c:ac:50:83:b7:7f:25:ab:ab:88:5f:e4:89:3b:ae:7a:15:03:a3:a2:50:f1:3e:efSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

gdiplus

winmm

shlwapi

Sections

.text Size: 648KB - Virtual size: 646KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 40KB - Virtual size: 101KB

.tls Size: 4KB - Virtual size: 16B

.rsrc Size: 484KB - Virtual size: 481KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

b0:94:e5:ce:94:d3:c5:bf:7c:ac:50:83:b7:7f:25:ab:ab:88:5f:e4:89:3b:ae:7a:15:03:a3:a2:50:f1:3e:ef
Signer

.text
Size: 648KB - Virtual size: 646KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 40KB - Virtual size: 101KB

.tls
Size: 4KB - Virtual size: 16B

.rsrc
Size: 484KB - Virtual size: 481KB