SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]5981[.]9189[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.Malware-gen.5981.9189.exe
Size 965KB
Sample240212-w9f3rsba2x
SHA256 d5c78b62b3a63008127a31fdb356bcc8fc8a301c660708467525660d802d32ee
MD5 ff36088c0ded85dbc225f0913cf67a7b
SHA1 c8c792f2beaaf1f8abbcbfabedd59b6cb319a5db
SHA512 473bb5ce8b5b928b2588a744bac8dc7bcfb5ba107f20d5951da8ddf73cf6b18249083b018da311f88fcb3fd6feb2f84a7d1da0dcb473c8fde74818ea3c4990b6
SSDEEP 24576:R0LJ7wf5s8usysS3Fx1nwwsSZYxLUgaPCsp72Cyd5xHfTjB:R0LJM/u+UtJZATdrHfHB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.5981.9189.exe

.exe 965KB

SecuriteInfo.com.Win32.Malware-gen.5981.9189.exe

IMPHASH 2339ac77bf9371500ebbf86df3a10d43
SHA256 d5c78b62b3a63008127a31fdb356bcc8fc8a301c660708467525660d802d32ee
MD5 ff36088c0ded85dbc225f0913cf67a7b
SHA1 c8c792f2beaaf1f8abbcbfabedd59b6cb319a5db
SHA512 473bb5ce8b5b928b2588a744bac8dc7bcfb5ba107f20d5951da8ddf73cf6b18249083b018da311f88fcb3fd6feb2f84a7d1da0dcb473c8fde74818ea3c4990b6
SSDEEP 24576:R0LJ7wf5s8usysS3Fx1nwwsSZYxLUgaPCsp72Cyd5xHfTjB:R0LJM/u+UtJZATdrHfHB
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

42:3c:c5:30:6d:f3:4b:74:e7:64:64:93:3f:b9:93:50:a4:d3:a5:dc:5c:5f:fb:44:f0:8f:98:89:99:eb:31:3b

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=14380998,CN=SYSDEV LABORATORIES UK LIMITED,O=SYSDEV LABORATORIES UK LIMITED,L=Newport Pagnell,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 1, 0001

Subject

Serial Number

54:d4:24:cf:9a:f9:24:6b:26:14:d0:3a:3a:48:70:ab

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 6, 2022 - Dec 4, 2024

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 9, 2022 - Dec 6, 2032

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

27384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA GetModuleFileNameA GetSystemDirectoryA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA ExpandEnvironmentStringsA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA CompareStringA GetVersion GetModuleHandleW FreeResource LockResource LoadResource SizeofResource CloseHandle ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA SetCurrentDirectoryA GetTempFileNameA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA ExitProcess LoadLibraryExA GetVersionExA GetExitCodeProcess GetProcAddress CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA FindResourceA LoadLibraryA FreeLibrary InterlockedExchange Sleep InterlockedCompareExchange GetStartupInfoA RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA WaitForSingleObject

gdi32

GetDeviceCaps

user32

SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA GetDC ReleaseDC SetWindowPos SendMessageA PeekMessageA MsgWaitForMultipleObjects DispatchMessageA CallWindowProcA GetWindowLongA SetWindowLongA CharPrevA CharUpperA CharNextA ExitWindowsEx EndDialog GetDesktopWindow LoadStringA SetDlgItemTextA MessageBeep GetWindowRect GetSystemMetrics

msvcrt

_cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp __getmainargs memcpy memset _vsnprintf

comctl32

ord17

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.5981.9189.exe

PE Signature issue

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

version

generic