2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93

Sharing

Copy URL Twitter E-mail

General

Target
2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93
Size 461KB
Sample240613-2mgnnstcmc
SHA256 2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93
MD5 c0a99bc314392ebe539fa8b4743913ab
SHA1 4e8266d9483b733bc36f5074cddebce42a2eb916
SHA512 23b08b82c24a79dcb0c03d545c61bb413ef4c5005748388dbe2196d5088ab7fe2612640c6902bf2e9b5608277c216c3163bbe264b8e7b4ca476fcc655c355385
SSDEEP 12288:Byj0tfK+HwRxac/ljiRfxnPbGex36yY4fcEO:c7+HEMJ1Ge16ytfct
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93

.exe 461KB

2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93

IMPHASH 9cb404004cadeae8142aa26cdd5305b1
SHA256 2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93
MD5 c0a99bc314392ebe539fa8b4743913ab
SHA1 4e8266d9483b733bc36f5074cddebce42a2eb916
SHA512 23b08b82c24a79dcb0c03d545c61bb413ef4c5005748388dbe2196d5088ab7fe2612640c6902bf2e9b5608277c216c3163bbe264b8e7b4ca476fcc655c355385
SSDEEP 12288:Byj0tfK+HwRxac/ljiRfxnPbGex36yY4fcEO:c7+HEMJ1Ge16ytfct
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

45:ea:e1:22:6b:00:ed:ff:41:0b:8d:52:53:4a:aa:ef:3a:d8:fb:83:d4:f6:63:77:d0:63:9c:75:bc:6c:af:68

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Nov 2, 2023

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

09:97:c5:6c:aa:59:05:53:94:d9:a9:cd:b8:be:eb:56

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 13, 2023 - Jan 16, 2026

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

56:ab:95:75:28:9c:a5:9f:0e:17:d4:0b:ea:05:c3:1f

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 4, 2022 - Jan 1, 2029

Minor OS version

Major OS version

Entry point

58586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetTextAlign

user32

CallWindowProcA CreateCaret

shell32

ExtractIconExA

kernel32

WriteConsoleW HeapSize CreateFileW GetProcessHeap SetStdHandle CloseHandle WaitForSingleObject CreateThread VirtualAlloc WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess SetEnvironmentVariableW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEndOfFile

Name

.text

Size

185KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

212KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2b2fc854e5f12ad01f3e39ec3aafa9ff9338907f393a4b5f27702dc458d32d93

PE Signature issue

gdi32

user32

shell32

kernel32

generic