Confirmation[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Confirmation.exe
Size 846KB
Sample240125-28jp6aacdr
SHA256 b9371b217090aadf41da567face2032494d9fc5d7e4bb438dad702814c88fb97
MD5 68c6e04dbbdef9cd85f8ea7a88928e12
SHA1 48a629000a7f7537c6207c6ab5d874b2ed735028
SHA512 b2e50e55a151fdc2cd2b7a5cd6665ca0a8096df568487df0657f6e262eed458af59db195ccc191f4c496b032ccf4032484470483ad5d0202e3d0ce2de5523b3f
SSDEEP 24576:ZD3s67JlbkRA3azIqa2hGa4jr2KKgp6BefqZfQ:lX7VazIqhh/gLKGSeSZfQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

Confirmation.exe

.exe 846KB

Confirmation.exe

IMPHASH 714858d86af7839c838d9f014dd17886
SHA256 b9371b217090aadf41da567face2032494d9fc5d7e4bb438dad702814c88fb97
MD5 68c6e04dbbdef9cd85f8ea7a88928e12
SHA1 48a629000a7f7537c6207c6ab5d874b2ed735028
SHA512 b2e50e55a151fdc2cd2b7a5cd6665ca0a8096df568487df0657f6e262eed458af59db195ccc191f4c496b032ccf4032484470483ad5d0202e3d0ce2de5523b3f
SSDEEP 24576:ZD3s67JlbkRA3azIqa2hGa4jr2KKgp6BefqZfQ:lX7VazIqhh/gLKGSeSZfQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

4b:61:36:68:4f:b2:f2:98:c2:d6:22:70:f3:dc:9b:8c:b7:bb:3c:72:0f:d6:ad:a0:86:c3:23:e4:d3:e2:ab:0a

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 25, 2024

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

Major OS version

Entry point

106662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

GetProcAddress GetDiskFreeSpaceExW SetFileAttributesW Sleep CreateThread GetExitCodeThread GetLocalTime SystemTimeToFileTime GetStdHandle GetEnvironmentVariableW ExpandEnvironmentStringsW SetCurrentDirectoryW GetCurrentDirectoryW CompareFileTime CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW RemoveDirectoryW WriteFile GetTempPathW GetSystemTimeAsFileTime GetModuleHandleW LoadResource LockResource SizeofResource LoadLibraryA GlobalAlloc GlobalFree MulDiv lstrcmpW lstrcmpiA lstrcmpiW lstrlenA FindResourceExA MultiByteToWideChar WideCharToMultiByte GetLocaleInfoW SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDefaultLCID SetEnvironmentVariableW CreateFileA CreateFileW GetDriveTypeW GetCurrentProcess GetVersionExW VirtualProtect CreateFileMappingW MapViewOfFile FreeLibrary GetModuleFileNameW GetModuleHandleA SetProcessWorkingSetSize FreeConsole InitializeCriticalSection SetEvent ResetEvent CreateEventW GetCurrentThreadId TerminateThread SuspendThread GetSystemDirectoryW LocalFree FormatMessageW AssignProcessToJobObject IsBadReadPtr EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualAlloc VirtualFree GetFileSize ReadFile SetEndOfFile SetFilePointer SetFileTime GetFileInformationByHandle WaitForMultipleObjects RtlUnwind RaiseException EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId InitializeSListHead TerminateProcess DecodePointer SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize GetStringTypeW WriteConsoleW SetStdHandle GetProcessHeap SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA GetFileType HeapReAlloc LCMapStringW CompareStringW HeapFree HeapAlloc GetACP GetCommandLineA GetModuleFileNameA ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateJobObjectW GetStartupInfoW CreateProcessW ResumeThread SetInformationJobObject GetExitCodeProcess WaitForSingleObject GetQueuedCompletionStatus CreateIoCompletionPort SetLastError GetLastError CloseHandle GetCommandLineW lstrlenW GetTickCount lstrcpyW

user32

EnableMenuItem GetSystemMenu GetDC GetClientRect MessageBeep ClientToScreen PtInRect SetWindowLongW GetWindow DrawTextW EndDialog ShowWindow BringWindowToTop SendMessageW SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx LoadIconW LoadImageW DrawIconEx SystemParametersInfoW GetSystemMetrics EnableWindow SetFocus GetDlgItem DialogBoxIndirectParamW IsWindow CreateWindowExA CallWindowProcW DefWindowProcW wvsprintfW MessageBoxA GetKeyState CopyImage GetClassNameA GetParent GetDesktopWindow GetWindowLongW GetSysColor ScreenToClient GetWindowRect GetWindowTextLengthW GetWindowTextW SetWindowTextW ReleaseDC GetWindowDC GetMenu KillTimer SetTimer CharUpperW SetWindowPos DestroyWindow CreateWindowExW DispatchMessageW wsprintfW wsprintfA GetMessageW

gdi32

SelectObject StretchBlt GetCurrentObject GetObjectW CreateFontIndirectW DeleteObject DeleteDC CreateCompatibleDC GetDeviceCaps SetStretchBltMode CreateCompatibleBitmap

advapi32

FreeSid CheckTokenMembership AllocateAndInitializeSid

shell32

SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc ShellExecuteW SHGetSpecialFolderPathW ShellExecuteExW

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocStringLen VariantClear SysAllocString SysFreeString OleLoadPicture