f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573

Sharing

Copy URL Twitter E-mail

General

Target
f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573
Size 377KB
Sample240607-nvzybsgf22
SHA256 f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573
MD5 cae1a391a43e2a490fe1fcdbaa619ce4
SHA1 02cb2eb687c809ab6462cbededb4bd24fc868440
SHA512 a95826ff1ce4d4e5f1224a6de76e9eb29930b6d4a69c6d5c5518fb8216029eb8dd4546f6e2d522fa95f8bc79ae518a83caab597ff2be18867ca22db48c93cd88
SSDEEP 6144:quLKbqxdjkUe+wQ+Rm60lb/vtXJYb+QMd6wb2sj6pCrK3aBV+UdvrEFp7hKensW:qunT1Bb/vtXJYb+QMd6wbBsIK3aBjvrs
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573

.dll 377KB

f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573

IMPHASH fd07e2e2c8bf222eb8bca2b80a9ebdaf
SHA256 f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573
MD5 cae1a391a43e2a490fe1fcdbaa619ce4
SHA1 02cb2eb687c809ab6462cbededb4bd24fc868440
SHA512 a95826ff1ce4d4e5f1224a6de76e9eb29930b6d4a69c6d5c5518fb8216029eb8dd4546f6e2d522fa95f8bc79ae518a83caab597ff2be18867ca22db48c93cd88
SSDEEP 6144:quLKbqxdjkUe+wQ+Rm60lb/vtXJYb+QMd6wb2sj6pCrK3aBV+UdvrEFp7hKensW:qunT1Bb/vtXJYb+QMd6wbBsIK3aBjvrs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

02:b6:14:d3:c8:ab:88:6f:0e:0e:16:d7:e2:fd:27:23:a3:2a:e8:a5:72:b2:6f:4a:6a:29:a8:92:06:c5:1b:a2

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Mar 4, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

26:73:5a:fc:96:eb:27:45:18:0b:93:3b:98:e0:ba:a7:94:e7:1d:9c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

Chains

Mar 4, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 17, 2022 - Jul 29, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 17, 2022 - Jul 29, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

108613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\WorkFolder\Glarysoft\gu6\dll\vc\CrashReport\sourcecode\Release\CrashReport.pdb

kernel32

InterlockedIncrement CompareStringW WritePrivateProfileStringW GlobalFlags LoadLibraryA GlobalFindAtomW TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime HeapFree HeapAlloc VirtualProtect VirtualAlloc VirtualQuery HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess HeapSize GetTimeZoneInformation HeapCreate HeapDestroy GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetProcessHeap CreateFileA SetEnvironmentVariableA SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalAddAtomW GetModuleHandleA GlobalDeleteAtom ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA lstrcmpW InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrlenW MoveFileW Module32NextW Module32FirstW Process32NextW Process32FirstW CreateToolhelp32Snapshot OutputDebugStringA GetVersionExA ReadProcessMemory ResumeThread GetThreadContext SuspendThread GetEnvironmentVariableA GetModuleFileNameA GetCurrentDirectoryA SetLastError GetEnvironmentVariableW GetFileAttributesW QueryDosDeviceW OpenProcess GetTickCount GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW GetLogicalDrives GetVolumeInformationW WideCharToMultiByte Sleep GlobalMemoryStatusEx GetSystemInfo GetVersionExW LoadLibraryW FreeLibrary GetProcAddress GetModuleHandleW SetUnhandledExceptionFilter CreateDirectoryW ExpandEnvironmentStringsW GetLocalTime GetCurrentProcessId LockResource lstrlenA GetCurrentThreadId CreateFileW MultiByteToWideChar SizeofResource LoadResource FindResourceW GetModuleFileNameW InterlockedExchange LeaveCriticalSection EnterCriticalSection CloseHandle GetLastError GetCurrentThread VirtualFree GetCurrentProcess

user32

DestroyMenu RegisterWindowMessageW LoadIconW WinHelpW GetCapture GetClassLongW SetPropW GetPropW RemovePropW GetForegroundWindow GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx DefWindowProcW CallWindowProcW GetMenu SystemParametersInfoA IsIconic GetWindowPlacement CopyRect SetWindowPos ShowWindow SetWindowLongW IsWindow GetDlgItem GetWindow GetDlgCtrlID GetWindowRect GetDC GetSystemMetrics wsprintfW GetClassNameW PtInRect SetWindowTextW GetWindowTextW LoadCursorW GetSysColorBrush UnregisterClassW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState UnhookWindowsHookEx PostQuitMessage PostMessageW TabbedTextOutW DrawTextW DrawTextExW GrayStringW ClientToScreen ReleaseDC ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowThreadProcessId SendMessageW GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW GetSysColor CreateWindowExW

gdi32

CreateBitmap GetStockObject ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible DeleteDC GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateCompatibleBitmap GetDeviceCaps GetObjectW SelectObject DeleteObject BitBlt CreateCompatibleDC

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW GetTokenInformation CopySid GetLengthSid GetUserNameA RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

shell32

ShellExecuteW

shlwapi

PathFindFileNameW PathFindExtensionW PathFileExistsW

oleaut32

VariantClear VariantChangeType VariantInit

dbghelp

MiniDumpWriteDump

gdiplus

GdipCreateBitmapFromScan0 GdiplusShutdown GdiplusStartup GdipGetImageEncoders GdipGetImageEncodersSize GdipCreateBitmapFromHBITMAP GdipSaveImageToFile GdipCloneImage GdipDisposeImage GdipAlloc GdipFree

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoA GetFileVersionInfoSizeA GetFileVersionInfoSizeW

psapi

GetProcessMemoryInfo GetProcessImageFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

f5e6027cde15f2d0de051f4c1260e3b3a06ea8ebf9c4d1676c2ca037c0e00573

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

dbghelp

gdiplus

version

psapi

generic