ZelioSoft2_V5_4_2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ZelioSoft2_V5_4_2.exe
Size 104.3MB
Sample240522-m5dmeace32
SHA256 16a9207a469eacfea06b9a6bd2e98d0b0ecc5a5b25c1ca48466dce85feb9e23b
MD5 f97cc10affce3a41ed40d348c72ae768
SHA1 f9ebc4e96905ee56b16d84d14ce1ebda5b2a1f97
SHA512 903172a412367345ecd0844c40f945e3941c2495f25fb87f52e6e01170e90817bfb88945f13631e3c43e2a82aba2b4afc1cfb5042252b5dc0dfb94ee8dccb228
SSDEEP 3145728:OOIu1SAlAXAZAgAMAec65GS4QQDe0/3ruWKx6Lu:PIu1Ss6+ZL/GDe0PruRF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ZelioSoft2_V5_4_2.exe

.exe 104.3MB

ZelioSoft2_V5_4_2.exe

IMPHASH f052f84efefe84f64ac7fab273eb8464
SHA256 16a9207a469eacfea06b9a6bd2e98d0b0ecc5a5b25c1ca48466dce85feb9e23b
MD5 f97cc10affce3a41ed40d348c72ae768
SHA1 f9ebc4e96905ee56b16d84d14ce1ebda5b2a1f97
SHA512 903172a412367345ecd0844c40f945e3941c2495f25fb87f52e6e01170e90817bfb88945f13631e3c43e2a82aba2b4afc1cfb5042252b5dc0dfb94ee8dccb228
SSDEEP 3145728:OOIu1SAlAXAZAgAMAec65GS4QQDe0/3ruWKx6Lu:PIu1Ss6+ZL/GDe0PruRF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

69:7d:70:8b:3a:1a:95:96:62:ac:70:bf:36:22:f6:59:99:0a:82:94:44:25:7c:e5:22:04:dc:13:82:47:95:60

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=SCHNEIDER ELECTRIC USA\, INC.,OU=MS Industry 2,O=SCHNEIDER ELECTRIC USA\, INC.,L=Andover,ST=Massachusetts,C=US

Chains

Mar 31, 2022

CN=SCHNEIDER ELECTRIC USA\, INC.,OU=MS Industry 2,O=SCHNEIDER ELECTRIC USA\, INC.,L=Andover,ST=Massachusetts,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=SCHNEIDER ELECTRIC USA\, INC.,OU=MS Industry 2,O=SCHNEIDER ELECTRIC USA\, INC.,L=Andover,ST=Massachusetts,C=US

Serial Number

09:c5:ba:15:35:9d:dc:b5:0a:6f:ff:c3:03:29:bf:3f

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2020 - Dec 19, 2023

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2020 - Dec 29, 2030

Minor OS version

Major OS version

Entry point

274183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\ISP\setup.pdb

comctl32

ord17

kernel32

GetProcessHeap CopyFileW GetSystemDefaultUILanguage GlobalAlloc GlobalFree MulDiv GetLocaleInfoW WideCharToMultiByte lstrcpyA GetTickCount ExitThread CreateThread GetExitCodeProcess WaitForSingleObject ReadFile GetCommandLineW GetVersionExW GetTempPathW CreateFileW LoadLibraryA GetSystemDirectoryA HeapFree GlobalUnlock GlobalLock SizeofResource LockResource LoadResource MultiByteToWideChar FormatMessageW VerLanguageNameW GetWindowsDirectoryW HeapAlloc SetFileAttributesW GetFileTime FileTimeToLocalFileTime GetCurrentDirectoryW SetCurrentDirectoryW ExpandEnvironmentStringsW GetUserDefaultLangID GetSystemDefaultLangID CompareStringA CompareStringW IsBadReadPtr MoveFileW GetPrivateProfileIntW LoadLibraryW lstrcatW lstrcpynW lstrcmpiW LoadLibraryExW FreeLibrary FindResourceExW FreeResource GetPrivateProfileSectionNamesA GetPrivateProfileStringA GetPrivateProfileIntA lstrcatA lstrcmpiA FlushFileBuffers WriteConsoleW SetStdHandle OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP UnmapViewOfFile MapViewOfFile CreateFileMappingW VirtualQuery GetSystemInfo GetSystemTimeAsFileTime CreateEventW CreateMutexW ReleaseMutex DeleteCriticalSection InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency SetErrorMode RaiseException WriteFile SetFilePointer GetFileSize GetFileAttributesW GetDiskFreeSpaceExW GetDiskFreeSpaceW FindFirstFileW FindClose FindResourceW CreateDirectoryW GetSystemDirectoryW InterlockedDecrement InterlockedIncrement SetLastError GetLastError RemoveDirectoryW DeleteFileW lstrlenW lstrcpyW GetProcAddress GetModuleHandleW GetModuleFileNameW CreateProcessW Sleep CloseHandle LocalFree IsValidLocale FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType HeapReAlloc GetStdHandle HeapSize ReadConsoleW GetModuleHandleExW ExitProcess GetStringTypeW GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter GetACP IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind MoveFileExW FindNextFileW lstrcmpW GetCurrentThread QueryPerformanceCounter lstrcmpA SystemTimeToFileTime ResetEvent SetEvent GetDateFormatW GetTimeFormatW GetTempFileNameW CompareFileTime SetFileTime TerminateProcess InterlockedExchange LoadLibraryExA EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer LCMapStringW GetVersion GetCurrentProcessId GetLocalTime lstrlenA GetProcessTimes OpenProcess GetCurrentProcess

user32

PeekMessageW DispatchMessageW TranslateMessage LoadIconW SetWindowLongW GetWindowLongW MessageBoxW GetWindowRect SetWindowTextW SetForegroundWindow SetActiveWindow SetDlgItemTextW GetDlgItem EndDialog wsprintfW WaitForInputIdle DialogBoxIndirectParamW MoveWindow DrawIcon SystemParametersInfoW GetWindow FillRect GetSysColor MapWindowPoints RemovePropW GetPropW SetPropW EndPaint BeginPaint EnableMenuItem GetSystemMetrics SetFocus ExitWindowsEx CharUpperW wsprintfA CallWindowProcW CreateWindowExW PostMessageW DrawTextW UpdateWindow GetWindowDC InvalidateRect DrawFocusRect CopyRect InflateRect EnumChildWindows GetClassNameW MapDialogRect RegisterClassExW GetDlgItemTextW IntersectRect MonitorFromPoint DefWindowProcW GetMessageW LoadStringW LoadImageW ReleaseDC GetDC CreateDialogParamW GetParent GetWindowTextW CharNextW GetDesktopWindow GetClientRect IsWindowEnabled CreateDialogIndirectParamW IsWindowVisible IsDialogMessageW FindWindowExW ScreenToClient EnableWindow MsgWaitForMultipleObjects SendDlgItemMessageW SetWindowPos ShowWindow DestroyWindow IsWindow SendMessageW

gdi32

SetTextColor SetBkMode SetBkColor SaveDC RestoreDC CreateSolidBrush UnrealizeObject CreateHalftonePalette GetDIBColorTable SelectPalette SelectObject RealizePalette GetSystemPaletteEntries GetDeviceCaps DeleteDC CreatePalette CreateCompatibleDC BitBlt GetObjectW TranslateCharsetInfo DeleteObject CreateFontIndirectW CreateCompatibleBitmap CreateDCW CreatePatternBrush GetStockObject GetTextExtentPoint32W DeleteMetaFile CreateDIBitmap CreateBitmap CreateRectRgn PatBlt PlayMetaFile SelectClipRgn SetMapMode SetMetaFileBitsEx SetPixel StretchBlt SetStretchBltMode SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx TextOutW

advapi32

RegEnumValueW RegQueryValueExW SetEntriesInAclW RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateWellKnownSid RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegOpenKeyW OpenProcessToken AdjustTokenPrivileges AllocateAndInitializeSid FreeSid LookupPrivilegeValueW RegEnumKeyW OpenThreadToken GetTokenInformation EqualSid

shell32

ShellExecuteExW SHGetMalloc SHGetFolderPathW SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoInitializeEx CreateStreamOnHGlobal CoInitializeSecurity CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoUninitialize

oleaut32

VarUI4FromStr VariantInit VariantClear VariantChangeType VarBstrCat VarBstrCmp SysAllocString SysFreeString SysStringLen SysAllocStringLen SysReAllocStringLen SysStringByteLen GetErrorInfo SysAllocStringByteLen

shlwapi

PathFileExistsW

rpcrt4

UuidCreate RpcStringFreeW UuidToStringW

gdiplus

GdipGetImageWidth GdipGetImageHeight GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromStreamICM GdipCreateBitmapFromResource GdipCreateFromHDC GdipDeleteGraphics GdipSetInterpolationMode GdipDrawImageRectI

Sharing

General

Malware Config

Signatures

File Explorer

ZelioSoft2_V5_4_2.exe

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

rpcrt4

gdiplus

generic