SecuriteInfo[.]com[.]Heur[.]12942[.]20672[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Heur.12942.20672.exe
Size

2.3MB
MD5

9ea1b5b4c27135b96d3f1bce51ebaec5
SHA1

37776c3af4f951889ad566846b78ecf872828ede
SHA256

5d278714804cb0009c7581b03b921de5d18acd8601f33201ce11cf088cb278f1
SHA512

76933e68a6fca763295621e177282e0eb9e1619e6991c3253a85e421261e57427a7d84c69cd0357fe2339d0d8f96c01612e96404b535708edbdb88292f252321
SSDEEP

49152:aC3yi9FCmji8MI9nd5M/4UxBahetrNFDYZNBk:EmjFe3FDYZNBk

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Heur.12942.20672.exe
.exe windows:5 windows x64 arch:x64

ebbfa972423ebc0a313a71b07465fad3

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 09:33

Not After

27/07/2024, 09:33

Subject

SERIALNUMBER=15.06.2017,CN=Nenad Hrg,O=Nenad Hrg,STREET=Edelweissstrasse 104,L=Taufkirchen,ST=Bayern,C=DE,1.2.840.113549.1.9.1=#0c16737570706f727440736f6674776172656f6b2e636f6d,1.3.6.1.4.1.311.60.2.1.1=#130b546175666b69726368656e,1.3.6.1.4.1.311.60.2.1.2=#130642617965726e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:45

Not After

08/05/2033, 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:eb:ed:68:bb:c7:5b:77:bd:7b:08:62:92:ae:2d:d1:4d:86:fb:98:bc:88:45:d0:62:d5:ab:55:b1:fc:27:6d
Signer

Actual PE Digest

1b:eb:ed:68:bb:c7:5b:77:bd:7b:08:62:92:ae:2d:d1:4d:86:fb:98:bc:88:45:d0:62:d5:ab:55:b1:fc:27:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
HeapCreate
HeapSetInformation
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
HeapReAlloc
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
GetStartupInfoW
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
GetProcessHeap
HeapAlloc
HeapFree
InterlockedPushEntrySList
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
CompareStringA
SetEnvironmentVariableA
GetTempFileNameW
SetVolumeLabelW
CreateMutexW
LoadLibraryExW
GetTickCount
GetProfileStringW
GetLocaleInfoW
GetNumberFormatW
GetEnvironmentVariableW
GetPrivateProfileIntW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetDiskFreeSpaceW
TerminateProcess
GetSystemDirectoryW
GetUserDefaultLangID
GetUserDefaultLCID
EnumDateFormatsW
EnumTimeFormatsW
GetTimeFormatW
GetDateFormatW
GetShortPathNameW
GetPrivateProfileStringW
SizeofResource
FreeResource
GetLocalTime
SetFileTime
GetFileSize
SetFilePointer
ReadFile
TerminateThread
GetCurrentProcessId
MoveFileW
GetTimeZoneInformation
GetLogicalDrives
lstrcpynA
GlobalHandle
MulDiv
DeleteCriticalSection
InitializeCriticalSection
GetLastError
CreateThread
ExitProcess
Sleep
OutputDebugStringA
RemoveDirectoryW
DeleteFileW
GetLogicalDriveStringsW
GetDriveTypeW
GetFileAttributesW
SetFileAttributesW
CopyFileW
CreateDirectoryW
GetTempPathW
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
GetVersionExW
FindFirstFileW
GetFullPathNameW
SetLastError
CompareStringW
FindClose
FindNextFileW
FindResourceW
LoadResource
LockResource
GetCurrentProcess
FlushInstructionCache
lstrcpyW
FreeLibrary
WideCharToMultiByte
lstrcmpiW
lstrcmpW
lstrcatW
OutputDebugStringW
GetWindowsDirectoryW
GetModuleHandleW
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
RaiseException
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
lstrcpynW
lstrlenW
LoadLibraryW
GetCommandLineW

user32

SetMenuDefaultItem
IntersectRect
IsRectEmpty
SetScrollInfo
SetScrollPos
GetScrollPos
GetSystemMenu
GetMenuDefaultItem
SetRect
LoadBitmapW
PeekMessageW
SendMessageW
wsprintfW
SetWindowTextW
CallWindowProcW
GetWindowLongPtrW
IsMenu
SetWindowsHookExW
GetSysColorBrush
CallNextHookEx
UnhookWindowsHookEx
WindowFromPoint
GetWindowThreadProcessId
MessageBeep
TrackPopupMenuEx
DrawEdge
SetMenuItemInfoW
InsertMenuW
CheckMenuItem
EnableMenuItem
GetWindowDC
IsDialogMessageW
TranslateAcceleratorW
TrackPopupMenu
GetDoubleClickTime
GetMessagePos
EqualRect
CreatePopupMenu
AppendMenuW
SetClassLongW
PostMessageW
CopyRect
CreateDialogParamW
GetKeyState
GetMenuState
SendDlgItemMessageW
wvsprintfW
SetMenu
SetForegroundWindow
DeleteMenu
LoadAcceleratorsW
CharUpperW
RemoveMenu
GetMenuStringW
LoadIconW
CheckDlgButton
IsDlgButtonChecked
CreateDialogIndirectParamW
GetClipboardData
SetPropW
GetMenu
SetActiveWindow
mouse_event
MenuItemFromPoint
SetWindowPlacement
DispatchMessageW
SetWindowLongPtrW
EnumChildWindows
FindWindowExW
EndDialog
GetWindowLongW
SetWindowPos
GetClientRect
ShowWindow
SetTimer
KillTimer
GetParent
GetDlgItem
MapWindowPoints
SystemParametersInfoW
GetWindowRect
GetWindow
SetWindowLongW
RegisterClipboardFormatW
PostQuitMessage
GetFocus
GetAsyncKeyState
CharNextW
LoadImageW
GetSystemMetrics
MessageBoxW
GetWindowPlacement
InsertMenuItemW
GetScrollInfo
SendMessageA
SetMenuItemBitmaps
keybd_event
MapVirtualKeyW
DrawIcon
ScrollWindowEx
IsZoomed
SendMessageTimeoutW
GetMessageW
RemovePropW
GetMenuItemID
GetPropW
ShowCaret
DestroyIcon
GetIconInfo
LoadStringA
EnumWindows
FrameRect
InflateRect
SetParent
IsWindowVisible
DialogBoxIndirectParamW
RegisterWindowMessageW
CreateAcceleratorTableW
RegisterClassExW
LoadCursorW
GetClassInfoExW
DestroyAcceleratorTable
GetDesktopWindow
IsChild
RedrawWindow
InvalidateRgn
ClientToScreen
MoveWindow
SetWindowContextHelpId
MapDialogRect
MessageBoxA
GetMenuItemInfoW
GetActiveWindow
EnableWindow
GetCapture
ReleaseCapture
DrawAnimatedRects
TranslateMessage
GetDlgCtrlID
GetMenuItemCount
DestroyMenu
CreateWindowExW
GetWindowTextW
GetWindowTextLengthW
ScreenToClient
SetDlgItemTextW
IsWindow
LoadStringW
DrawTextW
ReleaseDC
GetDC
LoadMenuW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetSubMenu
DefWindowProcW
DestroyCursor
OffsetRect
CharLowerW
CreateCursor
GetClassNameW
SetRectEmpty
DialogBoxParamW
DestroyWindow
UpdateWindow
InvalidateRect
IsWindowEnabled
SetCapture
SetFocus
PtInRect
FillRect
DrawFocusRect
SetCursor
GetCursorPos
GetSysColor
BeginPaint
EndPaint
UnregisterClassA

gdi32

GetViewportExtEx
GetWindowExtEx
SelectClipRgn
SetViewportExtEx
SetWindowExtEx
GetEnhMetaFileHeader
ResetDCW
StartPage
EndPage
OffsetViewportOrgEx
EndDoc
AbortDoc
StartDocW
SetStretchBltMode
StretchBlt
GetCurrentObject
GetPixel
SetDIBitsToDevice
SetMapMode
Rectangle
LPtoDP
GetBkColor
DPtoLP
CreateEnhMetaFileW
CloseEnhMetaFile
SetPixel
CreateDCW
GetDIBits
GetClipBox
SetViewportOrgEx
CreateBitmap
CreatePatternBrush
PatBlt
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
IntersectClipRect
OffsetWindowOrgEx
ExcludeClipRect
SetWindowOrgEx
ExtTextOutW
RestoreDC
SaveDC
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateFontIndirectW
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
GetObjectW
CreateSolidBrush
SetTextColor
SetBkColor
DeleteEnhMetaFile
SetBkMode
GetStockObject

winspool.drv

OpenPrinterW
ClosePrinter
GetPrinterW

comdlg32

PrintDlgW
ChooseColorW
GetOpenFileNameW
GetSaveFileNameW
PageSetupDlgW

advapi32

RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
GetUserNameW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
CryptHashData
CryptGetHashParam
RegQueryInfoKeyW
GetTokenInformation
RegDeleteKeyW

shell32

SHFileOperationW
SHAppBarMessage
Shell_NotifyIconW
ord21
DragFinish
SHBrowseForFolderW
ord88
ord68
ExtractIconExW
SHGetSettings
ord25
DragQueryFileW
ord17
ord16
SHGetFileInfoW
DragAcceptFiles
ord190
ord155
ord18
ord4
ord2
SHGetDesktopFolder
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoUninitialize
CoInitialize
OleDuplicateData
DoDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CoCreateInstance
ReleaseStgMedium
OleGetClipboard
RevokeDragDrop
CoSetProxyBlanket
CoTaskMemRealloc
OleSetClipboard

oleaut32

VarUI4FromStr
VariantChangeType
OleCreatePictureIndirect
DispCallFunc
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysAllocString
SysStringLen
VariantClear
SysAllocStringLen
SysFreeString
VariantInit

shlwapi

PathRelativePathToW
StrCpyW

comctl32

ImageList_LoadImageW
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetIcon
InitCommonControlsEx
ImageList_SetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawEx
ImageList_AddMasked
ImageList_GetImageInfo
CreateStatusWindowW
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW

msimg32

AlphaBlend

gdiplus

GdipCreateBitmapFromStreamICM
GdipImageRotateFlip
GdiplusStartup
GdipDrawImageRectRectI
GdipSetImageAttributesGamma
GdipSetImageAttributesColorMatrix
GdipCreateHICONFromBitmap
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetPropertyItemSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext
GdipSetCompositingMode

winmm

PlaySoundW
timeGetTime

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebbfa972423ebc0a313a71b07465fad3

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

1b:eb:ed:68:bb:c7:5b:77:bd:7b:08:62:92:ae:2d:d1:4d:86:fb:98:bc:88:45:d0:62:d5:ab:55:b1:fc:27:6dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 34KB - Virtual size: 119KB

.pdata Size: 90KB - Virtual size: 90KB

Shared Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 18B

.rsrc Size: 481KB - Virtual size: 481KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

1b:eb:ed:68:bb:c7:5b:77:bd:7b:08:62:92:ae:2d:d1:4d:86:fb:98:bc:88:45:d0:62:d5:ab:55:b1:fc:27:6d
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 34KB - Virtual size: 119KB

.pdata
Size: 90KB - Virtual size: 90KB

Shared
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 18B

.rsrc
Size: 481KB - Virtual size: 481KB