General

Malware Config

Signatures

Files

• Setup_FileViewPro_2024.exe

  .exe windows:5 windows x86 arch:x86

  96463e54510912e6d32696ef2fb45958

  
  

  Code Sign

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:16:b3:6a:00:0e:93:ec:51:49:b6:6f:d9:a4:31:5d

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Not Before

  06-05-2022 00:00

  Not After

  05-05-2025 23:59

  Subject

  CN=Solvusoft Corporation,O=Solvusoft Corporation,ST=Nevada,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  93:52:e1:eb:ad:dc:68:9a:d1:71:ff:66:95:2f:0a:8f:5c:17:db:e4:09:4c:44:09:6e:ea:f2:e8:6b:bc:05:c4

  Signer

  Actual PE Digest

  93:52:e1:eb:ad:dc:68:9a:d1:71:ff:66:95:2f:0a:8f:5c:17:db:e4:09:4c:44:09:6e:ea:f2:e8:6b:bc:05:c4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  Setup.pdb

  Imports

  comctl32

  ord17

  ImageList_ReplaceIcon

  ImageList_Draw

  ImageList_Create

  ImageList_Destroy

  _TrackMouseEvent

  ImageList_GetIconSize

  shlwapi

  PathFileExistsW

  UrlIsW

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  crypt32

  CryptBinaryToStringA

  kernel32

  GlobalUnlock

  lstrlenA

  lstrcmpA

  CreateDirectoryW

  ReadFile

  GetFullPathNameW

  lstrlenW

  WriteFile

  LockFile

  SetFilePointer

  SetEndOfFile

  GetTempPathW

  CreateFileW

  UnlockFile

  lstrcmpW

  FlushFileBuffers

  MulDiv

  GetExitCodeProcess

  CreateMutexW

  ReleaseMutex

  TlsAlloc

  GlobalFlags

  GlobalFree

  WideCharToMultiByte

  TlsFree

  MoveFileW

  VirtualQuery

  DeleteFileW

  GetModuleFileNameW

  GetUserDefaultUILanguage

  GetVersion

  AreFileApisANSI

  TryEnterCriticalSection

  HeapCreate

  HeapFree

  InterlockedCompareExchange

  GetDiskFreeSpaceW

  OutputDebugStringA

  GetFullPathNameA

  UnlockFileEx

  GetFileAttributesW

  GetVersionExW

  UnmapViewOfFile

  HeapValidate

  HeapSize

  Sleep

  GetTempPathA

  GetDiskFreeSpaceA

  GetFileAttributesA

  GetFileAttributesExW

  FlushViewOfFile

  CreateFileA

  LoadLibraryA

  WaitForSingleObjectEx

  GetVersionExA

  DeleteFileA

  HeapReAlloc

  GetSystemInfo

  HeapAlloc

  HeapCompact

  HeapDestroy

  CreateFileMappingA

  LocalFree

  LockFileEx

  GetFileSize

  GetCurrentProcessId

  GetProcessHeap

  SystemTimeToFileTime

  GetSystemTimeAsFileTime

  GetSystemTime

  FormatMessageA

  CreateFileMappingW

  MapViewOfFile

  QueryPerformanceCounter

  GetTickCount

  GlobalAlloc

  GetCurrentDirectoryW

  IsValidCodePage

  FindNextFileA

  FindFirstFileExA

  FindClose

  ReadConsoleW

  WriteConsoleW

  SetStdHandle

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetTimeFormatW

  GetDateFormatW

  GetACP

  GetStdHandle

  GetModuleFileNameA

  ExitProcess

  SetFilePointerEx

  GetFileType

  GetConsoleMode

  GetConsoleCP

  GetModuleHandleExW

  ExitThread

  GetTimeZoneInformation

  RaiseException

  RtlUnwind

  CreateTimerQueue

  UnregisterWaitEx

  QueryDepthSList

  InterlockedFlushSList

  InterlockedPushEntrySList

  InterlockedPopEntrySList

  ReleaseSemaphore

  DuplicateHandle

  VirtualFree

  VirtualProtect

  VirtualAlloc

  LoadLibraryExW

  GetModuleHandleA

  FreeLibraryAndExitThread

  GetThreadTimes

  GetCurrentThread

  UnregisterWait

  RegisterWaitForSingleObject

  SetThreadAffinityMask

  GetProcessAffinityMask

  GetNumaHighestNodeNumber

  DeleteTimerQueueTimer

  ChangeTimerQueueTimer

  CreateTimerQueueTimer

  GetLogicalProcessorInformation

  GetThreadPriority

  SetThreadPriority

  CreateThread

  SignalObjectAndWait

  InitializeSListHead

  GetStartupInfoW

  IsDebuggerPresent

  IsProcessorFeaturePresent

  TerminateProcess

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  ResetEvent

  SetEvent

  GetCPInfo

  GetLocaleInfoW

  LCMapStringW

  CompareStringW

  DecodePointer

  EncodePointer

  GetModuleHandleW

  SwitchToThread

  CreateEventW

  InitializeCriticalSectionAndSpinCount

  SetLastError

  GetStringTypeW

  FreeLibrary

  GetProcAddress

  GlobalLock

  FindResourceW

  LoadLibraryW

  InterlockedIncrement

  TlsGetValue

  DeleteCriticalSection

  CloseHandle

  TerminateThread

  OutputDebugStringW

  GetLastError

  FormatMessageW

  MultiByteToWideChar

  ResumeThread

  SuspendThread

  GetCurrentThreadId

  WaitForSingleObject

  InitializeCriticalSection

  LeaveCriticalSection

  InterlockedDecrement

  lstrcpynW

  EnterCriticalSection

  TlsSetValue

  GetOEMCP

  GetCommandLineA

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableA

  LocalFileTimeToFileTime

  user32

  RegisterWindowMessageW

  GetParent

  TranslateMessage

  TranslateAcceleratorW

  PeekMessageW

  GetMenuItemCount

  InflateRect

  UpdateWindow

  LockWindowUpdate

  GetWindowLongW

  DispatchMessageW

  IsWindow

  SendMessageW

  GetMessageW

  EndPaint

  ScreenToClient

  CreatePopupMenu

  GetAsyncKeyState

  OffsetRect

  IsMenu

  GetDlgCtrlID

  ClientToScreen

  IsChild

  MapWindowPoints

  SendDlgItemMessageW

  GetSysColor

  DestroyMenu

  IsRectEmpty

  SetCapture

  TrackPopupMenuEx

  RemoveMenu

  CheckMenuItem

  AppendMenuW

  DrawTextW

  PtInRect

  ReleaseCapture

  GetCursorPos

  InvalidateRect

  GetWindowPlacement

  SetWindowPlacement

  EnableWindow

  RedrawWindow

  SetCursor

  UnregisterClassW

  CopyRect

  GetClientRect

  SetRect

  CreateDialogParamW

  DefWindowProcW

  LoadMenuW

  CallWindowProcW

  PostMessageW

  GetWindowRect

  DestroyWindow

  GetDC

  SetWindowPos

  MessageBoxW

  CreateWindowExW

  CallNextHookEx

  EndDialog

  GetSystemMetrics

  SetWindowTextW

  ShowWindow

  GetClassInfoW

  IsDialogMessageW

  WindowFromDC

  RegisterClassW

  DialogBoxIndirectParamW

  UnhookWindowsHookEx

  IntersectRect

  SetFocus

  GetUpdateRect

  LoadCursorW

  SetWindowsHookExW

  SetWindowLongW

  GetDlgItem

  PostQuitMessage

  GetDesktopWindow

  CreateDialogIndirectParamW

  SystemParametersInfoW

  DialogBoxParamW

  LoadImageW

  ReleaseDC

  BeginPaint

  gdi32

  CreatePen

  LineTo

  GetTextExtentPoint32W

  CreateRectRgn

  CreateRectRgnIndirect

  Rectangle

  SelectClipRgn

  MoveToEx

  PaintRgn

  CreateFontIndirectW

  CombineRgn

  RoundRect

  ExtTextOutW

  SetLayout

  CreateFontW

  GetDeviceCaps

  GetObjectW

  CreateSolidBrush

  SaveDC

  GetStockObject

  DeleteDC

  RestoreDC

  DeleteObject

  CreateCompatibleBitmap

  BitBlt

  StretchBlt

  CreateCompatibleDC

  SetBkColor

  SelectObject

  comdlg32

  GetFileTitleW

  shell32

  ShellExecuteExW

  ShellExecuteW

  ole32

  CLSIDFromString

  OleInitialize

  CoCreateInstance

  CoCreateGuid

  CoUninitialize

  OleUninitialize

  CoInitialize

  CreateStreamOnHGlobal

  oleaut32

  SysAllocString

  SafeArrayCreateVector

  VariantClear

  OleLoadPicture

  wininet

  DeleteUrlCacheEntryW

  InternetCheckConnectionW

  urlmon

  URLDownloadToFileW

  Sections

  .text

  Size: 1024KB - Virtual size: 1023KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 182KB - Virtual size: 182KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 19KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 45KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ