4c85f8869c8b42501417b210d82654cb8763eb5c40d1df0467bc82e96a30b713[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4c85f8869c8b42501417b210d82654cb8763eb5c40d1df0467bc82e96a30b713.exe
Size

1.9MB
MD5

51ef8406b7aaa033e9df8b83f3b3a403
SHA1

84441e268d4fc499a738d0a3510ca97ee3c34433
SHA256

4c85f8869c8b42501417b210d82654cb8763eb5c40d1df0467bc82e96a30b713
SHA512

7734d7621daacc86b4c2200812786cb122ed2459731d9029a9c41308b844859a31e1cbe4e6ba51300122573e67370065e31ee9d0bcdf6b4c6dea42a2db33b325
SSDEEP

24576:NLQDzzgjEph+inmnpwkT08b1s9BqMZL6rTb4wuHcq+CGBeMApHkYCKXe4K9:+fgimnpwk43ft+4wWt+jmCKXy9

Score

1^/10

Malware Config

Signatures

Files

4c85f8869c8b42501417b210d82654cb8763eb5c40d1df0467bc82e96a30b713.exe
.exe windows:4 windows x86 arch:x86

5314f3f670d67e1168d18f314838270f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:49:4d:7d:f0:20:97:10:7b:90:65:02:51:33:fe:92
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/02/2023, 00:00

Not After

08/03/2025, 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum LLC,O=Bitsum LLC,L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:aa:8a:20:b6:b1:1e:53:cf:b5:89:02:fa:d3:88:e5:ae:11:58:9d:a7:34:01:5d:f6:de:49:03:97:a6:2d:57
Signer

Actual PE Digest

c1:aa:8a:20:b6:b1:1e:53:cf:b5:89:02:fa:d3:88:e5:ae:11:58:9d:a7:34:01:5d:f6:de:49:03:97:a6:2d:57

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

StrStrIA

kernel32

SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetACP
GetOEMCP
SetEnvironmentVariableA
FindResourceA
GlobalAddAtomA
GetProfileStringA
FreeLibrary
VirtualFree
WideCharToMultiByte
GetProcAddress
LoadLibraryW
CloseHandle
WriteFile
CreateFileW
GetModuleFileNameW
MulDiv
GetPrivateProfileStringW
WritePrivateProfileStringW
LockResource
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetTickCount
ReadFile
GetFileAttributesW
GetTimeFormatW
GetDateFormatW
GetFileSize
DeleteFileW
lstrlenW
WaitForSingleObject
TerminateThread
MultiByteToWideChar
lstrcpynW
Sleep
SetEvent
ResetEvent
SetFileAttributesW
GetDriveTypeW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
CompareFileTime
GetTempFileNameW
GetTempPathW
CopyFileW
SetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FindClose
FindNextFileW
FindFirstFileW
SearchPathW
lstrcatW
CreateDirectoryW
GetCurrentDirectoryW
CreateProcessW
GetFileTime
SetFileTime
DeviceIoControl
GetLastError
SetFilePointer
SetEndOfFile
GetVolumeInformationW
GetVersion
GetVersionExW
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
LoadLibraryA
CreateFileA
CreateFileMappingA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetProcessHeap
GetSystemTime
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualAlloc
GetDiskFreeSpaceW
SetVolumeLabelW
MoveFileW
FormatMessageW
GetFileInformationByHandle
lstrcmpiW
GetFullPathNameW
lstrlenA
GlobalSize
SetLastError
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
GetStringTypeExW
GetThreadLocale
GetShortPathNameW
ResumeThread
CreateEventW
FileTimeToSystemTime
LocalFileTimeToFileTime
GlobalGetAtomNameW
GetCurrentThread
lstrcmpiA
lstrcmpW
GetCommandLineA
GetPrivateProfileIntW
GetProfileIntW
GetProcessVersion
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableW
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW

user32

SetDlgItemTextW
IsDialogMessageW
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfW
LoadStringW
ValidateRect
GetMessageW
GetDesktopWindow
ReuseDDElParam
UnpackDDElParam
SetCursorPos
WaitMessage
GetWindowThreadProcessId
IsZoomed
ShowOwnedPopups
GetDCEx
GetTabbedTextExtentA
SetParent
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageW
GetWindowPlacement
EndDialog
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetWindowDC
SetWindowPos
ShowWindow
RegisterClipboardFormatW
DestroyCaret
MessageBoxW
SetScrollPos
GetScrollInfo
ScrollWindowEx
SetScrollInfo
BeginPaint
EndPaint
CreateWindowExW
DefWindowProcW
CharToOemBuffA
OemToCharBuffA
wsprintfW
wsprintfA
CreateAcceleratorTableW
DestroyAcceleratorTable
WindowFromDC
SetClassLongW
TrackPopupMenuEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetTopWindow
CreateMenu
MapVirtualKeyW
GetKeyNameTextW
SetMenuItemInfoW
IsMenu
CopyAcceleratorTableW
GetMenuItemInfoW
CallWindowProcW
GetMessagePos
DrawEdge
DrawStateW
FrameRect
DrawFocusRect
GetActiveWindow
GetNextDlgTabItem
GetWindowLongW
DestroyCursor
GrayStringW
TabbedTextOutW
EqualRect
GetSysColorBrush
RegisterClassExW
SetWindowRgn
SetRectEmpty
DestroyIcon
GetIconInfo
LoadImageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
TranslateAcceleratorW
LoadAcceleratorsW
EnableScrollBar
RegisterClassW
SetCaretPos
ShowCaret
HideCaret
GetAsyncKeyState
SetCursor
DrawTextExW
DispatchMessageW
TranslateMessage
DrawTextW
DrawFrameControl
PeekMessageW
PostQuitMessage
IsIconic
IsWindowEnabled
FindWindowW
ClientToScreen
ScreenToClient
SetWindowLongW
DestroyMenu
SetMenu
BringWindowToTop
SetActiveWindow
IsRectEmpty
GetWindow
IsWindow
GetClassNameW
GetClassInfoExW
DeleteMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetFocus
GetDlgCtrlID
GetMenu
FillRect
InflateRect
GetCapture
ReleaseCapture
SetCapture
KillTimer
SetTimer
LockWindowUpdate
UnregisterClassW
GetWindowTextLengthA
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
IsWindowVisible
GetSystemMenu
RemoveMenu
IntersectRect
UpdateWindow
IsClipboardFormatAvailable
SetFocus
MoveWindow
SetRect
CharUpperW
OffsetRect
GetCursorPos
GetSysColor
ModifyMenuW
RedrawWindow
CopyRect
GetWindowTextW
SetWindowTextW
GetMenuStringW
SystemParametersInfoW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
ScrollWindow
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
WinHelpW
LoadBitmapW
LoadCursorW
InvalidateRect
GetDlgItem
GetDC
ReleaseDC
PtInRect
WindowFromPoint
IsChild
CreatePopupMenu
AppendMenuW
GetKeyState
GetClientRect
PostMessageW
LoadMenuW
GetSubMenu
EnableMenuItem
GetWindowRect
SetClipboardData
GetClassInfoW
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadStringA
CharLowerW
SendMessageW
GetParent
EnableWindow
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
SetPropW
GetPropW
CreateCaret
RemovePropW
MessageBeep

gdi32

GetTextExtentPointA
GetDeviceCaps
CreateSolidBrush
CreateRectRgnIndirect
PatBlt
CreateDIBitmap
ExtTextOutA
CopyMetaFileW
GetTextExtentPoint32A
GetTextFaceW
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetViewportOrgEx
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
CreateFontW
StretchDIBits
DPtoLP
SetRectRgn
CreatePatternBrush
LineTo
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocW
SetTextAlign
MoveToEx
GetCurrentPositionEx
TextOutA
CreateDCW
SetBitmapDimensionEx
SetMapMode
SelectPalette
GetDIBits
SetDIBits
RealizePalette
CreatePen
CreatePalette
GetNearestColor
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
Pie
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
CreateRectRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
EqualRgn
OffsetRgn
FrameRgn
CreateCompatibleBitmap
Ellipse
CreateHatchBrush
RoundRect
GetCurrentObject
GetTextColor
GetBkColor
GetCharWidthW
GetBitmapDimensionEx
CreateCompatibleDC
BitBlt
StretchBlt
DeleteObject
GetTextMetricsW
GetStockObject
GetObjectW
SelectObject
GetTextExtentPoint32W
Rectangle
CreateFontIndirectW

comdlg32

PageSetupDlgW
CommDlgExtendedError
ChooseFontW
GetFileTitleW
ChooseColorW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

EnumPrintersW
OpenPrinterW
GetPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

GetUserNameW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegSetValueW

shell32

SHGetPathFromIDListW
ExtractIconW
SHGetFileInfoW
DragAcceptFiles
SHBrowseForFolderW
ShellExecuteW
SHGetMalloc
ShellExecuteExW
DragFinish
DragQueryFileW

comctl32

ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ord13
ord14
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Add

ole32

OleIsCurrentClipboard
OleGetClipboard
OleSetClipboard
CoCreateInstance
OleDuplicateData
DoDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
RevokeDragDrop
CoFileTimeNow
ReleaseStgMedium
CreateStreamOnHGlobal
CoUninitialize
CoLockObjectExternal
CoInitialize
RegisterDragDrop

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysAllocString

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5314f3f670d67e1168d18f314838270f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:49:4d:7d:f0:20:97:10:7b:90:65:02:51:33:fe:92Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

c1:aa:8a:20:b6:b1:1e:53:cf:b5:89:02:fa:d3:88:e5:ae:11:58:9d:a7:34:01:5d:f6:de:49:03:97:a6:2d:57Signer

Headers

File Characteristics

Imports

imm32

version

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.ddata Size: 24KB - Virtual size: 23KB

.rdata Size: 176KB - Virtual size: 175KB

.data Size: 260KB - Virtual size: 354KB

.rsrc Size: 408KB - Virtual size: 407KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:49:4d:7d:f0:20:97:10:7b:90:65:02:51:33:fe:92
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

c1:aa:8a:20:b6:b1:1e:53:cf:b5:89:02:fa:d3:88:e5:ae:11:58:9d:a7:34:01:5d:f6:de:49:03:97:a6:2d:57
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.ddata
Size: 24KB - Virtual size: 23KB

.rdata
Size: 176KB - Virtual size: 175KB

.data
Size: 260KB - Virtual size: 354KB

.rsrc
Size: 408KB - Virtual size: 407KB