3_scan_word[.]pdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3_scan_word.pdf.exe
Size 1.1MB
Sample240129-hw267acec9
SHA256 6a7afd800f236e6bf6cdaa2fc93869daade49c2b5698bbb39c3d8ecc13d0fd9c
MD5 fcc897939f337b97a78d541a94e34303
SHA1 5906e6d4d11804b0ad06c20e1817026aafb014a0
SHA512 6b1be7426015c8c8d60ef491623c84287a908925cc5e86c5424e531ef35bd16e2a30a5527cca31d2f8e91c1ed57dd89cbe9ca0e12600d4587c496565d9cd2fa0
SSDEEP 24576:M+O08Sh4J81pcXgYlzJd2TJHZl6eM8zV440wYZbTdUsKcQTzcQz8kIBG+YMU0GXw:8tzJwT7VoBTdUBPFAHc2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3_scan_word.pdf.exe

.exe 1.1MB

3_scan_word.pdf.exe

IMPHASH 3aa346d8709331035c6d7460981619af
SHA256 6a7afd800f236e6bf6cdaa2fc93869daade49c2b5698bbb39c3d8ecc13d0fd9c
MD5 fcc897939f337b97a78d541a94e34303
SHA1 5906e6d4d11804b0ad06c20e1817026aafb014a0
SHA512 6b1be7426015c8c8d60ef491623c84287a908925cc5e86c5424e531ef35bd16e2a30a5527cca31d2f8e91c1ed57dd89cbe9ca0e12600d4587c496565d9cd2fa0
SSDEEP 24576:M+O08Sh4J81pcXgYlzJd2TJHZl6eM8zV440wYZbTdUsKcQTzcQz8kIBG+YMU0GXw:8tzJwT7VoBTdUBPFAHc2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3e:2d:fd:e4:b7:b7:ef:8b:e8:2c:6e:0d:f0:7f:eb:9b:ce:b9:49:79:b9:49:25:17:b0:d1:4a:36:fa:2e:0b:11

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Digiarty Software\, Inc.,O=Digiarty Software\, Inc.,L=Chengdu,ST=Sichuan,C=CN

Chains

Jan 18, 2024

CN=Digiarty Software\, Inc.,O=Digiarty Software\, Inc.,L=Chengdu,ST=Sichuan,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

Major OS version

Entry point

158578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

SetLastError GetDiskFreeSpaceExW SetFileAttributesW SystemTimeToFileTime GetLocalTime GetExitCodeThread CreateThread Sleep GetCurrentDirectoryW SetCurrentDirectoryW GetFileAttributesW GetTempPathW MultiByteToWideChar WideCharToMultiByte CompareFileTime FindClose FindFirstFileW CreateDirectoryW ExpandEnvironmentStringsW lstrlenA WriteFile GetStdHandle lstrcmpW GetSystemTimeAsFileTime RemoveDirectoryW FindNextFileW DeleteFileW GetModuleHandleW SetThreadLocale LoadLibraryA lstrcmpiA GetEnvironmentVariableW LockResource LoadResource SizeofResource FindResourceExA MulDiv GlobalFree GlobalAlloc GetSystemDefaultLCID GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW lstrcmpiW SetEnvironmentVariableW GetModuleFileNameW GetVersionExW CreateFileW GetDriveTypeW CreateEventW SetEvent ResetEvent InitializeCriticalSection GetCurrentThreadId GetSystemDirectoryW TerminateThread SuspendThread IsBadReadPtr LocalFree GetProcAddress FormatMessageW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection VirtualAlloc VirtualFree GetFileSize SetFilePointer ReadFile SetFileTime SetEndOfFile GetFileInformationByHandle WaitForMultipleObjects DecodePointer EncodePointer ExitThread RtlUnwind RaiseException HeapAlloc HeapFree HeapReAlloc GetCommandLineA HeapSetInformation HeapSize ExitProcess IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount HeapCreate GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId LoadLibraryW GetStringTypeW LCMapStringW GetCommandLineW GetStartupInfoW CreateProcessW GetLastError CreateJobObjectW AssignProcessToJobObject CreateIoCompletionPort SetInformationJobObject ResumeThread GetQueuedCompletionStatus WaitForSingleObject CloseHandle GetExitCodeProcess lstrlenW GetTickCount lstrcpyW

user32

CallNextHookEx PtInRect GetClientRect SetWindowsHookExW SetWindowLongW UnhookWindowsHookEx SetFocus SystemParametersInfoW GetWindow LoadImageW LoadIconW DrawTextW GetDC ClientToScreen DialogBoxIndirectParamW MessageBeep DrawIconEx CallWindowProcW DefWindowProcW EnableWindow IsWindow GetDlgItem GetSystemMenu CreateWindowExA wvsprintfW GetWindowTextLengthW GetWindowTextW CreateWindowExW GetDesktopWindow GetWindowRect SetWindowPos SetTimer GetMessageW DispatchMessageW KillTimer CharUpperW wsprintfW SendMessageW ShowWindow BringWindowToTop EndDialog GetSystemMetrics GetKeyState MessageBoxA wsprintfA GetWindowDC ReleaseDC GetClassNameA CopyImage GetWindowLongW GetMenu DestroyWindow GetSysColor SetWindowTextW GetParent EnableMenuItem ScreenToClient

gdi32

SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDeviceCaps DeleteObject CreateFontIndirectW SetStretchBltMode StretchBlt GetCurrentObject GetObjectW DeleteDC

shell32

SHGetPathFromIDListW SHGetMalloc SHGetFileInfoW ShellExecuteW SHGetSpecialFolderPathW ShellExecuteExW SHBrowseForFolderW

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

OleLoadPicture SysAllocString SysAllocStringLen VariantClear SysFreeString