IconPackager_setup[.]exe

General

Target
IconPackager_setup.exe
Size 80.0MB
Sample240224-shdxjsfb85
SHA256 7c1d9b1b10997c929696f7ec020c3e12898ba49260bb3ed1140f823a38fba69c
MD5 a3814762aee8f23e685b7a788eee16b3
SHA1 7affe297f6c11a0ff5186730e9ffd22ba5be86ad
SHA512 f8e7280def27919d07cc92631fd383a97f3d76bcf90b5003c7469d3a8d7d4c54c56b93e400ee092c81bd6c35eaca418ddc02ba42b05bee7dd6a208560d7c601c
SSDEEP 1572864:ho9EXgtq18G8vVx5gkkF0p8b1Ei9y1UgYc1x3iWy85qvIEW9DvkL3D36NeNw:ho9Ewtq186op8b1t9y1zYc1lxy85q1GT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

IconPackager_setup.exe

.exe 80.0MB

IconPackager_setup.exe

IMPHASH 0047ffc8d91ee9a957961742504880d6
SHA256 7c1d9b1b10997c929696f7ec020c3e12898ba49260bb3ed1140f823a38fba69c
MD5 a3814762aee8f23e685b7a788eee16b3
SHA1 7affe297f6c11a0ff5186730e9ffd22ba5be86ad
SHA512 f8e7280def27919d07cc92631fd383a97f3d76bcf90b5003c7469d3a8d7d4c54c56b93e400ee092c81bd6c35eaca418ddc02ba42b05bee7dd6a208560d7c601c
SSDEEP 1572864:ho9EXgtq18G8vVx5gkkF0p8b1Ei9y1UgYc1x3iWy85qvIEW9DvkL3D36NeNw:ho9Ewtq186op8b1t9y1zYc1lxy85q1GT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

cc:0f:3d:4f:27:38:c2:d9:3a:24:b9:14:86:bc:06:2a:6a:ff:10:3e:ed:db:25:3a:f3:66:29:5c:9a:fc:ca:1c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Stardock Corporation,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Chains

Aug 9, 2016

CN=Stardock Corporation,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Stardock Corporation,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Serial Number

52:89:e3:7a:80:c2:a8:a6:8b:8d:96:4e:15:3a:ae:38

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2016 - Apr 13, 2019

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Apr 11, 2027

Minor OS version

1

Major OS version

5

Entry point

10737

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA _lclose GetModuleFileNameA _lread _llseek _lopen _lwrite _lcreat CreateDirectoryA SetCurrentDirectoryA lstrcatA FreeLibrary GetProcAddress LoadLibraryA GetDiskFreeSpaceA GetFileAttributesA RemoveDirectoryA lstrcpyA GetTempPathA GetCurrentDirectoryA CloseHandle GetExitCodeProcess GetLastError LocalFree GetCurrentProcess MoveFileExA GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc RtlUnwind HeapSize CompareStringA DeleteFileA Sleep IsValidCodePage GetOEMCP GetModuleHandleW ExitProcess DecodePointer HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent HeapCreate FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP

user32

TranslateMessage DispatchMessageA PeekMessageA wsprintfA LoadCursorA SetCursor MessageBoxA MsgWaitForMultipleObjects

advapi32

GetTokenInformation OpenProcessToken

shell32

ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

IconPackager_setup.exe

kernel32

user32

advapi32

shell32

generic