a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4

Sharing

Copy URL Twitter E-mail

General

Target
a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4
Size 8.0MB
Sample240429-e7n7xsad64
SHA256 a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4
MD5 8fe5acf6de7c1aa68a9017f1730b1349
SHA1 0eb712b99346a67a5dbf8ed7bae1e63e0adfb9cb
SHA512 3de24762402b0f18fb1a0ccfac6f182524e6426e98627a31a327f387e70425bf0d91b2ae761a48526828b85099eda68f99abd9a0970a5c7c7653d502641394b8
SSDEEP 24576:xvXFCQrey7M87yVFOQ60yTczf+kcgMFZQUYn5067InlWK/iXv8:xvXFC58eV8Q6qivHYntMh/i0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4

.exe 8.0MB

a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4

IMPHASH dde45285bfd49d18dc2a3fd38c978af0
SHA256 a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4
MD5 8fe5acf6de7c1aa68a9017f1730b1349
SHA1 0eb712b99346a67a5dbf8ed7bae1e63e0adfb9cb
SHA512 3de24762402b0f18fb1a0ccfac6f182524e6426e98627a31a327f387e70425bf0d91b2ae761a48526828b85099eda68f99abd9a0970a5c7c7653d502641394b8
SSDEEP 24576:xvXFCQrey7M87yVFOQ60yTczf+kcgMFZQUYn5067InlWK/iXv8:xvXFC58eV8Q6qivHYntMh/i0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

c7:e3:a9:42:31:a3:35:cd:d2:f4:3d:53:92:8d:6a:fb:d2:1c:dc:9e:8f:09:fa:cd:50:29:4f:ae:63:f3:78:aa

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Feb 10, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0d:1a:34:0f:78:d7:d0:00:e0:89:fd:ba:ad:65:22:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 3, 2023 - Nov 4, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

192856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\7zsfxmm-9661f20d755d8bb8ca5ead4af3460d5185a17678\Output\Win32\7ZSfxMod.pdb

comctl32

ord17

kernel32

SetLastError Sleep CreateThread GetExitCodeThread GetLocalTime SystemTimeToFileTime GetEnvironmentVariableW ExpandEnvironmentStringsW SetCurrentDirectoryW GetCurrentDirectoryW CompareFileTime CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW RemoveDirectoryW GetTempPathW GetSystemTimeAsFileTime lstrcmpW lstrcmpiW lstrlenA MultiByteToWideChar WideCharToMultiByte GetLocaleInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDefaultLCID GetCommandLineW SetEnvironmentVariableW CreateFileW GetDriveTypeW WriteFile GetTickCount GetModuleFileNameW GetModuleHandleW LoadLibraryA BeginUpdateResourceW UpdateResourceW EndUpdateResourceW GetCurrentThreadId TerminateThread SuspendThread ResumeThread GetSystemDirectoryW GetProcAddress LockResource LocalFree MulDiv FormatMessageW lstrcpyW FindResourceA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualAlloc VirtualFree GetFileSize ReadFile SetEndOfFile SetFilePointer SetFileTime GetFileInformationByHandle WaitForMultipleObjects InitializeCriticalSection SetEvent ResetEvent CreateEventW RtlUnwind RaiseException EncodePointer VirtualQuery InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCurrentProcess InitializeSListHead GetCurrentProcessId QueryPerformanceCounter SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent SetFileAttributesW WaitForSingleObject GetLastError CloseHandle lstrlenW LoadResource TerminateProcess

user32

ReleaseDC GetClientRect MessageBeep ClientToScreen PtInRect GetWindowLongW SetWindowLongW GetWindow SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx GetWindowDC SetTimer DrawIconEx SystemParametersInfoW SetFocus DefWindowProcW wvsprintfW MessageBoxA GetKeyState GetParent ScreenToClient GetDC DrawTextW EnableMenuItem GetSystemMenu GetSystemMetrics EnableWindow LoadIconW KillTimer SendMessageW EndDialog wsprintfW GetDlgItem CallWindowProcW SetWindowPos ShowWindow LoadImageW IsWindow CharUpperW SetWindowTextW GetWindowTextW DialogBoxIndirectParamW GetWindowTextLengthW GetWindowRect

gdi32

DeleteObject GetDeviceCaps SelectObject GetObjectW CreateFontIndirectW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc ShellExecuteW SHGetSpecialFolderPathW ShellExecuteExW SHGetFileInfoW

ole32

CoCreateInstance CoInitializeEx

oleaut32

SysAllocStringLen VariantClear

api-ms-win-crt-convert-l1-1-0

_wtol

api-ms-win-crt-string-l1-1-0

strncpy wcsncpy wcsncmp strcpy_s _wcsnicmp

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe _set_app_type _configure_narrow_argv _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment abort _set_new_handler _controlfp_s _beginthreadex _cexit

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode malloc free _callnewh

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

a857af8b33c62e7897af86264a2c8959545cacf74329b76730e2a84b35ef20a4

PE Signature issue

comctl32

kernel32

user32

gdi32

shell32

ole32

oleaut32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic