7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa

Sharing

Copy URL Twitter E-mail

General

Target
7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa
Size 521KB
Sample240703-3pb2mstfpf
SHA256 7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa
MD5 0578c4d0a69456e0605c16a0d074f98d
SHA1 3e7862af0c1c732c721ee41c48f22baef6f8e596
SHA512 68dfae4d325ddd2cda54b45730613bf5e09fb7f2e563c5ad5bcb893408ec243fa5f17164eb8ac5c7769168bc7a6862c60babb494d9bfa8c6faaf5faf0af2ae34
SSDEEP 12288:Ddl6y6MByhr+BaH5rhZOqESC6Dq229iNexr9HS0EO:hgCykYbkLn22sept
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa

.exe 521KB

7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa

IMPHASH bdd081110ce6691ddde6cfe79c51d26e
SHA256 7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa
MD5 0578c4d0a69456e0605c16a0d074f98d
SHA1 3e7862af0c1c732c721ee41c48f22baef6f8e596
SHA512 68dfae4d325ddd2cda54b45730613bf5e09fb7f2e563c5ad5bcb893408ec243fa5f17164eb8ac5c7769168bc7a6862c60babb494d9bfa8c6faaf5faf0af2ae34
SSDEEP 12288:Ddl6y6MByhr+BaH5rhZOqESC6Dq229iNexr9HS0EO:hgCykYbkLn22sept
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

8f:22:6d:81:6c:76:cc:b8:bb:b3:c3:37:5c:9c:8d:87:d4:0a:4d:04:fc:67:6e:b9:09:56:dc:93:9d:67:87:4f

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Nov 2, 2023

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

09:97:c5:6c:aa:59:05:53:94:d9:a9:cd:b8:be:eb:56

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 13, 2023 - Jan 16, 2026

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

56:ab:95:75:28:9c:a5:9f:0e:17:d4:0b:ea:05:c3:1f

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 4, 2022 - Jan 1, 2029

Minor OS version

Major OS version

Entry point

29826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

OffsetRect

kernel32

CreateFileW HeapSize GetProcessHeap SetStdHandle WaitForSingleObject Sleep CreateThread VirtualAlloc GetModuleHandleA GetProcAddress GetConsoleWindow CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW SetEnvironmentVariableW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

7a1e32507bd0b9ac461c6323aa5208c4174e5333c41440d3b6b1fb03f3261caa

PE Signature issue

user32

kernel32

generic