Overview

overview

5

Static

static

1

VisualStudioSetup.exe

windows7-x64

4

VisualStudioSetup.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    VisualStudioSetup.exe
  • Size 3.8MB
  • Sample240520-rrwnaaee2z
  • SHA256 158540a607ac3e189cbf71591d8d9e24821d1aa86d1e11da1e43f410dfc1b548
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • VisualStudioSetup.exe
    .exe 3.8MB

VisualStudioSetup.exe

  • IMPHASH 01b29b0304f316768e6c21448e7b24b7
  • SHA256 158540a607ac3e189cbf71591d8d9e24821d1aa86d1e11da1e43f410dfc1b548
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86

PE Signature issue

Digest
ba:f2:fb:61:23:17:c2:9a:e3:d1:df:ad:12:eb:f5:f2:b5:53:6f:91:a9:64:ad:42:62:fc:3a:a5:29:37:2b:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=C2RService,O=C2RService,L=Redmond,ST=Washington,C=US
Chains

May 16, 2024

Digest
ba:f2:fb:61:23:17:c2:9a:e3:d1:df:ad:12:eb:f5:f2:b5:53:6f:91:a9:64:ad:42:62:fc:3a:a5:29:37:2b:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
1
Major OS version
5
Entry point
122832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\_work\1\s\src\BoxStub\bin\Release\Win32\boxstub.pdb