8fa76cd75fe02c1093f254977f44ee79

General

Target
8fa76cd75fe02c1093f254977f44ee79
Size 394KB
Sample240204-t9nrhagedq
SHA256 54deea77c66f31b5b2ae101d942ddc0acd04a146f1dadf85f80034e1f6edd567
MD5 8fa76cd75fe02c1093f254977f44ee79
SHA1 dfa7b0b4d24a93e4463921dbc7886e84dfd60495
SHA512 37cf4197dd1a2069382c11997c644bea869968beeae55b03b47040372f8dcb1faa75c858916b38e589c6735ef94e912590943ff97691713d6e44760380ac1c74
SSDEEP 6144:LNrji59qUe4LHW60V4Ayscy2sF3Y/VAOYc219/BtJTjjn1LFois8ICCKzche/9Wn:L1U9qUe4LZ0N8VwJn1LFoipIMz/QGbi9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8fa76cd75fe02c1093f254977f44ee79

.exe 394KB

8fa76cd75fe02c1093f254977f44ee79

IMPHASH b535572a0356e55475d8da75f1f57f3e
SHA256 54deea77c66f31b5b2ae101d942ddc0acd04a146f1dadf85f80034e1f6edd567
MD5 8fa76cd75fe02c1093f254977f44ee79
SHA1 dfa7b0b4d24a93e4463921dbc7886e84dfd60495
SHA512 37cf4197dd1a2069382c11997c644bea869968beeae55b03b47040372f8dcb1faa75c858916b38e589c6735ef94e912590943ff97691713d6e44760380ac1c74
SSDEEP 6144:LNrji59qUe4LHW60V4Ayscy2sF3Y/VAOYc219/BtJTjjn1LFois8ICCKzche/9Wn:L1U9qUe4LZ0N8VwJn1LFoipIMz/QGbi9
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

86:79:26:16:6e:76:4e:83:e5:4e:fb:42:52:21:d8:2a:14:20:8e:72

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Chains

Jul 20, 2021

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Serial Number

05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 4, 2018 - Oct 7, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

29645

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetSystemInfo GetTickCount GetModuleHandleA GetModuleHandleW GetProcAddress LoadResource LockResource FindResourceW CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW WriteConsoleW

user32

SendMessageCallbackA MessageBoxA MessageBeep

Sharing

General

Malware Config

Signatures

File Explorer

8fa76cd75fe02c1093f254977f44ee79

PE Signature issue

kernel32

user32

generic