a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1[.]exe

General

Target
a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1.exe
Size 469KB
Sample240423-b1kdlsbb7w
SHA256 a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1
MD5 8867f1deedc7be48ca1d4c6b196bbb4d
SHA1 b0f832a006e07ff7e0faeeacaef0a36196025b92
SHA512 33db9f4763f36eb859b2051615a1b438657a862a6d8ea9c4a6c6462195f2dd80ced9db14ca218f4e9f26ee22d7ed3bf97d0e0aa24b97ba239768f721f48fb6a0
SSDEEP 6144:T5lB8LBngajQnCav1od1u5YWpM4HDRlg2piuzCEZGlsNP2c+ieGubJynHW7z4Ago:1lBm2D+dEYqBlbpwnlGP2jiYn4dJIpL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1.exe

.exe 469KB

a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1.exe

IMPHASH 7e96b6ef7008ea8d1709b279822744a0
SHA256 a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1
MD5 8867f1deedc7be48ca1d4c6b196bbb4d
SHA1 b0f832a006e07ff7e0faeeacaef0a36196025b92
SHA512 33db9f4763f36eb859b2051615a1b438657a862a6d8ea9c4a6c6462195f2dd80ced9db14ca218f4e9f26ee22d7ed3bf97d0e0aa24b97ba239768f721f48fb6a0
SSDEEP 6144:T5lB8LBngajQnCav1od1u5YWpM4HDRlg2piuzCEZGlsNP2c+ieGubJynHW7z4Ago:1lBm2D+dEYqBlbpwnlGP2jiYn4dJIpL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

ec:65:2f:53:0c:69:c4:5d:47:ee:37:c6:a9:26:22:32:06:31:34:7e:87:45:44:70:0a:6f:0a:d1:06:29:3b:ec

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Chains

Jul 25, 2023

SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Serial Number

0c:98:38:f6:73:f9:b1:cc:e3:95:cf:ab:2b:66:84:e4

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 8, 2020 - Oct 12, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

19105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CreateCaret

advapi32

DuplicateToken

shell32

ShellExecuteExA

kernel32

CreateFileW TlsFree HeapSize GetProcessHeap WaitForSingleObject CreateRemoteThread VirtualProtectEx EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess TerminateProcess SetStdHandle RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue WriteConsoleW FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

Sharing

General

Malware Config

Signatures

File Explorer

a05c7adad0de49fbaed8b65557a448d886c4fce98e31655cf7d7cdcaa023c3a1.exe

PE Signature issue

user32

advapi32

shell32

kernel32

generic