IntelAudioService[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

IntelAudioService.exe
Size

520KB
MD5

2b8e287d62d3c06aedb109f047517467
SHA1

be08bb81b514b942408d1eb2268c6bebeaa05d7f
SHA256

b890b28503a57fa78e65e6db37e9c4fb36049a44ebc7f4a0e589f8084e5a52af
SHA512

37b46a3ddba3703cd3d47e3657ed8c7966444ef9fd41ed7107124272c185823ceb0c3269aee242310070ec602d79264accff2e7dab1b2add45d0cda900235b39
SSDEEP

6144:w/yznLV7g9wnJfjUZq5GxYTifk4nR9QByKdQmAqTNbkfGvFdK8G9qrQ2Iwkme:w/K+UJrU+ic4nDUxdP8SJm9me

Score

1^/10

Malware Config

Signatures

Files

IntelAudioService.exe
.exe windows:4 windows x64 arch:x64

Code Sign

d5:cc:90:21:a6:76:11:f4:b5:d5:44:1f:74:11:3c:fb
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/04/2021, 00:00

Not After

02/04/2023, 23:59

Subject

CN=Intel Corporation,OU=SolarKMCS,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a
Signer

Actual PE Digest

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a

Digest Algorithm

sha256

PE Digest Matches

true

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a
Signer

Actual PE Digest

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\qba1\workspace\41494\wov_components\IntelAudioService\AudioServiceCore\obj\x64\Release-Driver\IntelAudioService.pdb

Sections

.text
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

d5:cc:90:21:a6:76:11:f4:b5:d5:44:1f:74:11:3c:fbCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6aSigner

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 499KB - Virtual size: 498KB

.rsrc Size: 2KB - Virtual size: 1KB

d5:cc:90:21:a6:76:11:f4:b5:d5:44:1f:74:11:3c:fb
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a
Signer

5c:86:87:b7:ac:6d:09:ab:d6:67:87:8d:5a:a7:79:99:5c:51:06:64:5f:31:ed:2c:f9:8e:a2:34:ae:7b:96:6a
Signer

.text
Size: 499KB - Virtual size: 498KB

.rsrc
Size: 2KB - Virtual size: 1KB