a0d64867b8783745f14b9dcb03dad73720f9c96a4972cbd3200a73db7bf1c8fb

Sharing

Copy URL Twitter E-mail

General

Target

a0d64867b8783745f14b9dcb03dad73720f9c96a4972cbd3200a73db7bf1c8fb
Size

356KB
MD5

22ddb087ef3310b3f724544f74e28966
SHA1

fcc08a88ecc632482cdc610c06c9ee3ee161aa09
SHA256

a0d64867b8783745f14b9dcb03dad73720f9c96a4972cbd3200a73db7bf1c8fb
SHA512

883c94192f29ae8741b59114b256e56042956be4161e96134e9c222c6d6f43f0f57b32efd2eb57713e358aca369700e0415b198aecfcf9b50bc3edefa2ea5700
SSDEEP

6144:6ChdraRou9W+ePa6zTmXI6fdyJefiQgHVTeX:6ChdooWW+ey6GINTeX

Score

1^/10

Malware Config

Signatures

Files

a0d64867b8783745f14b9dcb03dad73720f9c96a4972cbd3200a73db7bf1c8fb
.exe windows:5 windows x86 arch:x86

f29671453df461552b0cc81395241457

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:2b:6b:ca:c8:e8:2e:5c:a9:72:da:b3:09:79:d0:b1:06:c7:8e:fe:61:1c:13:50:b5:82:d3:f5:8b:36:f3:59
Signer

Actual PE Digest

72:2b:6b:ca:c8:e8:2e:5c:a9:72:da:b3:09:79:d0:b1:06:c7:8e:fe:61:1c:13:50:b5:82:d3:f5:8b:36:f3:59

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\dvs\p4\build\sw\rel\gpu_drv\r387\r388_10\drivers\stereo_vision\Setup\nvStInst\Release\bin\nvStInst.pdb

Imports

shfolder

SHGetFolderPathW
SHGetFolderPathA

shlwapi

SHDeleteValueA
SHDeleteKeyA

setupapi

SetupOpenInfFileW
SetupFindFirstLineW
SetupGetLineTextW
SetupCloseInfFile
SetupFindNextLine

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

FreeResource
LockResource
LoadResource
GetLastError
FindResourceExW
GetModuleHandleW
FreeLibrary
GetProcAddress
LocalFree
GetModuleFileNameA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
Sleep
DeleteFileA
SetFileAttributesA
MoveFileA
ExpandEnvironmentStringsA
FindNextFileW
DeleteFileW
FindFirstFileW
GetCommandLineA
CopyFileA
CreateDirectoryA
CreateFileA
HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
GetFileAttributesW
GetUserDefaultUILanguage
RemoveDirectoryW
DeviceIoControl
MultiByteToWideChar
CreateFileW
GetCurrentProcess
CreateDirectoryW
GetSystemDirectoryA
ExitProcess
DeleteCriticalSection
GetSystemTime
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExA
MoveFileExW
GetFileSizeEx
OutputDebugStringW
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LocalAlloc
SetLastError
GetModuleHandleA
LoadLibraryExW
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
VerifyVersionInfoW
GetLocaleInfoA
GetSystemDefaultLCID
GetVersionExW
GetSystemDirectoryW
LoadLibraryW
GetFileAttributesA
SetStdHandle
InitializeCriticalSectionAndSpinCount
ReadFile
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
SetFileAttributesW
VerSetConditionMask
GetStringTypeW
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
HeapSize
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStringTypeA

user32

MessageBoxW

advapi32

OpenServiceA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
StartServiceW
OpenSCManagerW
EnumDependentServicesW
OpenServiceW
ControlService
QueryServiceStatusEx
CloseServiceHandle
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
DeleteService

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f29671453df461552b0cc81395241457

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3cCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

72:2b:6b:ca:c8:e8:2e:5c:a9:72:da:b3:09:79:d0:b1:06:c7:8e:fe:61:1c:13:50:b5:82:d3:f5:8b:36:f3:59Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shfolder

shlwapi

setupapi

version

kernel32

user32

advapi32

ole32

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 5KB - Virtual size: 66KB

.rsrc Size: 135KB - Virtual size: 134KB

.reloc Size: 47KB - Virtual size: 47KB

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

72:2b:6b:ca:c8:e8:2e:5c:a9:72:da:b3:09:79:d0:b1:06:c7:8e:fe:61:1c:13:50:b5:82:d3:f5:8b:36:f3:59
Signer

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 5KB - Virtual size: 66KB

.rsrc
Size: 135KB - Virtual size: 134KB

.reloc
Size: 47KB - Virtual size: 47KB