218A5E448E0D6F8C6CF7FF5CB36388DC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
218A5E448E0D6F8C6CF7FF5CB36388DC.exe
Size 911KB
Sample240609-tdcpcscb41
SHA256 fd8fddbdb3956871f31fba4e5b84c4b4e0bf49aea74f7f6d1a5e42af5611b52a
MD5 218a5e448e0d6f8c6cf7ff5cb36388dc
SHA1 21032e9cadba7a6811cc78590003f77ec7e3f4a9
SHA512 fc56f4b301ab0c76c6e498163003479bbcc29fa717fe0d50f90e7abd5f3183391341d8a6978610210baca6ebdb2d34ba9777b9c100fac628a726b8834878fe36
SSDEEP 24576:QwooTjn2STgqhV29O3wEhwF0L0e1tZ2a9J8wyRzexLap6zxu:GKjnFTf5AEhDL0e1/2a921exLakI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

218A5E448E0D6F8C6CF7FF5CB36388DC.exe

.exe 911KB

218A5E448E0D6F8C6CF7FF5CB36388DC.exe

IMPHASH 003a54a0fe3c2a4dbf64143004ff22d3
SHA256 fd8fddbdb3956871f31fba4e5b84c4b4e0bf49aea74f7f6d1a5e42af5611b52a
MD5 218a5e448e0d6f8c6cf7ff5cb36388dc
SHA1 21032e9cadba7a6811cc78590003f77ec7e3f4a9
SHA512 fc56f4b301ab0c76c6e498163003479bbcc29fa717fe0d50f90e7abd5f3183391341d8a6978610210baca6ebdb2d34ba9777b9c100fac628a726b8834878fe36
SSDEEP 24576:QwooTjn2STgqhV29O3wEhwF0L0e1tZ2a9J8wyRzexLap6zxu:GKjnFTf5AEhDL0e1/2a921exLakI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=Kakao Corp.,O=Kakao Corp.,L=Jeju-si,ST=Jeju-do,C=KR

Serial Number

09:be:bd:8f:ba:e0:11:98:c5:52:55:0b:a6:80:f1:7b

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 6, 2023 - May 15, 2025

Minor OS version

Major OS version

Entry point

14392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA LoadCursorW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA CharPrevW RegisterClassW MessageBoxIndirectW SystemParametersInfoW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode CreateProcessW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW GetTempPathW

Sharing

General

Malware Config

Signatures

File Explorer

218A5E448E0D6F8C6CF7FF5CB36388DC.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic