voicemeetersetup[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

voicemeetersetup.exe
Size

23.0MB
MD5

498b965e8cb309fcd76095905c37dc2b
SHA1

18ef98f027a355503045f599d36e1f6da5d5a12d
SHA256

7d32e51937a3733b82a26515db805f698e70c59cda391ddda01411bc9891f490
SHA512

6f937a9a987308d9bec4431858df594bbda0334b6e3d83158febac63fed7823ec585a1ae22b64ae3295bd2f557b0b81549615c5e85f1219aa2600f18d6694d94
SSDEEP

393216:d4lDeyK3pMYU/zvex9SaRw/WRLq3jreWKC6tBwvsMiSirhk1ufkNlQoTJRyCrTde:d4lDeyK3pMYU/zvwSaRwWA35z6tBwvXQ

Score

1^/10

Malware Config

Signatures

Files

voicemeetersetup.exe
.exe windows:4 windows x86 arch:x86

ea261b8705e96efbd78ea7bb4bcfa46a

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19-09-2018 00:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28-07-2020 00:00

Not After

18-03-2029 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:e1:40:c4:04:1a:07:b9:5a:12:4e:22
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

03-04-2023 15:47

Not After

21-06-2025 14:59

Subject

SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06-04-2022 07:45

Not After

08-05-2033 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:3a:fd:eb:a2:94:d6:76:90:21:0f:1a:79:2e:83:1a:29:a9:97:23:90:72:c9:95:22:49:00:b6:73:c3:46:62
Signer

Actual PE Digest

04:3a:fd:eb:a2:94:d6:76:90:21:0f:1a:79:2e:83:1a:29:a9:97:23:90:72:c9:95:22:49:00:b6:73:c3:46:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetDriveTypeA
WriteFile
SetFilePointer
RemoveDirectoryA
VirtualFree
VirtualAlloc
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetThreadPriority
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapCreate
HeapDestroy
GetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
RtlUnwind
HeapAlloc
HeapFree
MoveFileA
CreateThread
SetFileAttributesA
GetTickCount
CopyFileA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
MultiByteToWideChar
GetCurrentProcess
GetVersionExA
GetCurrentDirectoryA
CreateDirectoryA
GetSystemTime
GetSystemDirectoryA
CreateFileA
GetModuleHandleA
CreateFileW
CreateEventA
DeviceIoControl
WideCharToMultiByte
CreateMutexA
GetLastError
ReleaseMutex
GetFileType
GetCurrentThread
GetModuleFileNameA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose

user32

MessageBoxA
DefWindowProcA
PostQuitMessage
SetCursor
ReleaseDC
GetDC
KillTimer
DrawTextA
LoadBitmapA
LoadCursorA
PostMessageA
EndPaint
BeginPaint
SetFocus
SetTimer
SetWindowPos
GetSystemMetrics
SystemParametersInfoA
GetMessageA
DispatchMessageA
TranslateMessage
GetClassNameA
GetWindowTextA
EnumWindows
GetWindow
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow

gdi32

Rectangle
GetStockObject
SetTextColor
RoundRect
SetBkMode
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateFontIndirectA
GetObjectA

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
RegEnumKeyA
RegOpenKeyW
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoFreeLibrary
CoInitialize
CoTaskMemFree
CoCreateInstance
PropVariantClear
CoUninitialize

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfaceAlias
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

winmm

timeEndPeriod
timeBeginPeriod
waveInGetNumDevs
waveInGetDevCapsW
waveOutGetNumDevs
waveOutGetDevCapsW

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22.9MB - Virtual size: 22.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea261b8705e96efbd78ea7bb4bcfa46a

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

52:e1:40:c4:04:1a:07:b9:5a:12:4e:22Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

04:3a:fd:eb:a2:94:d6:76:90:21:0f:1a:79:2e:83:1a:29:a9:97:23:90:72:c9:95:22:49:00:b6:73:c3:46:62Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

setupapi

winmm

Sections

.text Size: 84KB - Virtual size: 81KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 28KB - Virtual size: 51KB

.rsrc Size: 22.9MB - Virtual size: 22.9MB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

52:e1:40:c4:04:1a:07:b9:5a:12:4e:22
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

04:3a:fd:eb:a2:94:d6:76:90:21:0f:1a:79:2e:83:1a:29:a9:97:23:90:72:c9:95:22:49:00:b6:73:c3:46:62
Signer

.text
Size: 84KB - Virtual size: 81KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 28KB - Virtual size: 51KB

.rsrc
Size: 22.9MB - Virtual size: 22.9MB