SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]1638[.]31612[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.Malware-gen.1638.31612.exe
Size 1.1MB
Sample240130-ss2flahbd4
SHA256 37e7d37868a9d4c17f153822fc7744c3e4e0617f6cae9697c778da18d0d91cd6
MD5 372894142599e37c16b10e893cc0f0b1
SHA1 02f1ad2ed5836fd78d456df8e5dcaf275b65201c
SHA512 a5bc56f6ece6148e9d0c285db1f57b23f8418893d17d3ece6b6ce0aadc7b0aaa2c87ea053ebe0dfe71d21e98d034f6f3c878fe81e1612c321c04711205e6d8b0
SSDEEP 24576:IDuW4f8EQOL58mV7Th8Kp4nD54E0JNS39Egj7C:IDuW4tV8sy04D5R0JNS39Eg6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.1638.31612.exe

.exe 1.1MB

SecuriteInfo.com.Win32.Malware-gen.1638.31612.exe

IMPHASH bf9634a06f63de6e7fa867afb3215189
SHA256 37e7d37868a9d4c17f153822fc7744c3e4e0617f6cae9697c778da18d0d91cd6
MD5 372894142599e37c16b10e893cc0f0b1
SHA1 02f1ad2ed5836fd78d456df8e5dcaf275b65201c
SHA512 a5bc56f6ece6148e9d0c285db1f57b23f8418893d17d3ece6b6ce0aadc7b0aaa2c87ea053ebe0dfe71d21e98d034f6f3c878fe81e1612c321c04711205e6d8b0
SSDEEP 24576:IDuW4f8EQOL58mV7Th8Kp4nD54E0JNS39Egj7C:IDuW4tV8sy04D5R0JNS39Eg6
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

fc:dd:24:b5:24:02:e6:43:b8:3d:0b:ee:57:88:e2:1b:45:99:b4:98:73:54:54:53:15:6e:f4:82:ec:bf:2a:22

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=RayShare Co.\, Ltd,O=RayShare Co.\, Ltd,L=Beijing,ST=Beijing,C=CN,1.2.840.113549.1.9.1=#0c1572617973686172656c746440676d61696c2e636f6d

Chains

Nov 22, 2023

CN=RayShare Co.\, Ltd,O=RayShare Co.\, Ltd,L=Beijing,ST=Beijing,C=CN,1.2.840.113549.1.9.1=#0c1572617973686172656c746440676d61696c2e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=RayShare Co.\, Ltd,O=RayShare Co.\, Ltd,L=Beijing,ST=Beijing,C=CN,1.2.840.113549.1.9.1=#0c1572617973686172656c746440676d61696c2e636f6d

Serial Number

3a:ce:ec:3c:57:11:8e:80:3e:7d:93:c0

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2023 - Jun 2, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

116045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

SetLastError GetDiskFreeSpaceExW SetFileAttributesW Sleep GetExitCodeThread CreateThread SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW lstrlenA WriteFile GetStdHandle GetModuleHandleW LockResource LoadResource SizeofResource FindResourceExA MulDiv GlobalFree GlobalAlloc lstrcmpiA GetSystemDefaultLCID GetSystemDefaultUILanguage GetUserDefaultUILanguage MultiByteToWideChar GetLocaleInfoW lstrcmpiW GetEnvironmentVariableW SetCurrentDirectoryW lstrcmpW RemoveDirectoryW FindClose FindNextFileW DeleteFileW FindFirstFileW GetCurrentDirectoryW GetTempPathW WideCharToMultiByte CompareFileTime ExpandEnvironmentStringsW GetSystemTimeAsFileTime SetThreadLocale LoadLibraryA FreeConsole SetEnvironmentVariableW CreateFileW GetModuleFileNameW GetVersionExW CreateEventW SetEvent ResetEvent InitializeCriticalSection GetCurrentThreadId GetSystemDirectoryW TerminateThread SuspendThread IsBadReadPtr LocalFree GetCommandLineW FormatMessageW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection VirtualAlloc VirtualFree GetFileSize SetFilePointer ReadFile SetFileTime SetEndOfFile GetFileInformationByHandle WaitForMultipleObjects DecodePointer EncodePointer ExitThread RtlUnwind RaiseException HeapAlloc HeapFree HeapReAlloc GetCommandLineA HeapSetInformation HeapSize ExitProcess IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount HeapCreate GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId LoadLibraryW GetStringTypeW LCMapStringW GetStartupInfoW CreateProcessW GetLastError CreateJobObjectW AssignProcessToJobObject CreateIoCompletionPort SetInformationJobObject ResumeThread GetQueuedCompletionStatus WaitForSingleObject CloseHandle GetExitCodeProcess GetProcAddress lstrlenW GetTickCount lstrcpyW

user32

GetClientRect SetWindowLongW UnhookWindowsHookEx SetFocus GetSystemMetrics SystemParametersInfoW DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW CallNextHookEx PtInRect SetWindowsHookExW LoadImageW LoadIconW MessageBeep EnableWindow GetDlgItem GetSystemMenu CreateWindowExA wvsprintfW wsprintfW GetParent ScreenToClient CreateWindowExW GetDesktopWindow GetWindowRect SetWindowPos SetTimer GetMessageW DispatchMessageW KillTimer CharUpperW SendMessageW ShowWindow BringWindowToTop EndDialog IsWindow GetKeyState MessageBoxA DestroyWindow GetSysColor SetWindowTextW GetWindowTextW GetWindowTextLengthW wsprintfA GetClassNameA GetWindowLongW GetMenu GetWindowDC ReleaseDC EnableMenuItem CopyImage

gdi32

SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDeviceCaps DeleteObject CreateFontIndirectW SetStretchBltMode StretchBlt GetCurrentObject GetObjectW DeleteDC

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderPathW ShellExecuteExW SHGetFileInfoW

ole32

CoInitialize CreateStreamOnHGlobal CoCreateInstance

oleaut32

OleLoadPicture SysAllocString SysAllocStringLen VariantClear SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.1638.31612.exe

PE Signature issue

comctl32

kernel32

user32

gdi32

shell32

ole32

oleaut32

generic