MF220MFDriverV450WPEN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MF220MFDriverV450WPEN.exe
Size 119.8MB
Sample240720-vd9vjatfrd
SHA256 6730a7555fb894c7fcbdfebb40f96cfad54f878234182c4a8cf9c4111e0f3d83
MD5 6acf59202169700180fff91db29a20e0
SHA1 17db6fed06e61c19e4f0b780af4bb9d927c3736b
SHA512 1d7020094666f6c22c87dc800e3b88da0e6d3e366406a683b5aebf3ac4225e77fa5739be9e657839e0a6c8bc16a6a020509481bf0e513a8db0906fbacfc2ff30
SSDEEP 3145728:aU4IC7S0xEa6VqA0Lb2FfS/4/EuYCAOcj5g:d4IH0xEZsLadS/GZYTnjW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

MF220MFDriverV450WPEN.exe

.exe 119.8MB

MF220MFDriverV450WPEN.exe

IMPHASH 1353b98c8e38f7bc7142e9e4de5c8b46
SHA256 6730a7555fb894c7fcbdfebb40f96cfad54f878234182c4a8cf9c4111e0f3d83
MD5 6acf59202169700180fff91db29a20e0
SHA1 17db6fed06e61c19e4f0b780af4bb9d927c3736b
SHA512 1d7020094666f6c22c87dc800e3b88da0e6d3e366406a683b5aebf3ac4225e77fa5739be9e657839e0a6c8bc16a6a020509481bf0e513a8db0906fbacfc2ff30
SSDEEP 3145728:aU4IC7S0xEa6VqA0Lb2FfS/4/EuYCAOcj5g:d4IH0xEZsLadS/GZYTnjW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

f9:fc:77:cf:0a:2d:b7:81:f1:6f:97:65:25:66:0f:75:14:a1:c7:85:a1:4f:be:11:9c:cf:38:2e:7f:51:ca:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=CANON INC.,OU=Digital Printing Business,O=CANON INC.,L=Kawasaki,ST=Kanagawa,C=JP

Chains

Apr 14, 2021

CN=CANON INC.,OU=Digital Printing Business,O=CANON INC.,L=Kawasaki,ST=Kanagawa,C=JP

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=CANON INC.,OU=Digital Printing Business,O=CANON INC.,L=Kawasaki,ST=Kanagawa,C=JP

Serial Number

47:28:6e:8d:32:89:98:34:da:f7:72:00:aa:78:87:9b

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 25, 2020 - Oct 11, 2021

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

84959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteW FindExecutableW SHBrowseForFolderW SHGetMalloc

user32

DefWindowProcW GetWindowWord SetWindowWord BeginPaint GetSysColor GetClientRect SetRect EndPaint LoadCursorW GetLastActivePopup KillTimer ShowWindow PostMessageW SendMessageW EnableWindow SetTimer SetForegroundWindow RegisterClassW DialogBoxParamW SetDlgItemTextW EndDialog GetWindowRect GetSystemMetrics SetWindowPos OemToCharA GetWindowLongW SetWindowLongW GetKeyState PeekMessageW TranslateMessage DispatchMessageW SetCursor GetParent SendDlgItemMessageW GetDlgItem InvalidateRect UpdateWindow MessageBoxW SetWindowTextW GetDlgItemTextW SetActiveWindow LoadStringW

kernel32

LCMapStringW LCMapStringA HeapReAlloc HeapSize IsValidCodePage GetOEMCP GetACP GetCPInfo SetEndOfFile GetConsoleMode FindFirstFileW SetCurrentDirectoryW SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime LocalAlloc LoadLibraryA CreateDirectoryW GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetVersionExW GetModuleFileNameW WriteFile GetSystemTime CreateProcessW LocalFree CloseHandle CreateFileW ExitProcess FormatMessageW GetLastError SetErrorMode CreateFileA ReadFile SetFilePointer InitializeCriticalSection WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA GetVolumeInformationW FlushFileBuffers FindClose GetConsoleCP Sleep LeaveCriticalSection EnterCriticalSection SetStdHandle GetSystemTimeAsFileTime GetCurrentProcessId VirtualAlloc VirtualFree FileTimeToSystemTime FileTimeToLocalFileTime GetFullPathNameW GetLocalTime GetProcAddress GetWindowsDirectoryW GetCurrentDirectoryW GetEnvironmentVariableW GetModuleHandleA MultiByteToWideChar WideCharToMultiByte GetDriveTypeW HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32W ExtTextOutW CreateDCW GetDeviceCaps CreateFontIndirectW DeleteDC SelectObject DeleteObject SetBkColor

comctl32

ord17

advapi32

RegQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

MF220MFDriverV450WPEN.exe

shell32

user32

kernel32

gdi32

comctl32

advapi32

generic