d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4

Sharing

Copy URL Twitter E-mail

General

Target
d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4
Size 536KB
Sample240801-2sf94a1amn
SHA256 d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4
MD5 bc92faf500546af0fb71d7c6418905ab
SHA1 38932282504d67051016bf2176cba1171ae1260d
SHA512 805ffbe5b21993e64e6e0179aec7df9f831913de22f30b1f0ad09f38ab8e30446a950cb26083256ff94a27f34decb6f3e9f32f275acdd140405f44224452919f
SSDEEP 12288:BrIeZI4pncile9SPsoo8DJHrixKwcPphOICcEO:BMeZlcile8PstgLa3cPGI7t
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4

.exe 536KB

d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4

IMPHASH 1fc209333184bab70eeb99c1bb32ba6d
SHA256 d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4
MD5 bc92faf500546af0fb71d7c6418905ab
SHA1 38932282504d67051016bf2176cba1171ae1260d
SHA512 805ffbe5b21993e64e6e0179aec7df9f831913de22f30b1f0ad09f38ab8e30446a950cb26083256ff94a27f34decb6f3e9f32f275acdd140405f44224452919f
SSDEEP 12288:BrIeZI4pncile9SPsoo8DJHrixKwcPphOICcEO:BMeZlcile8PstgLa3cPGI7t
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

3a:1f:a7:5c:9f:72:f9:e8:9f:50:c2:d9:45:46:4b:60:75:03:4f:16:82:e2:74:5a:7f:fb:41:fa:b2:28:82:86

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Nov 2, 2023

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

09:97:c5:6c:aa:59:05:53:94:d9:a9:cd:b8:be:eb:56

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 13, 2023 - Jan 16, 2026

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

56:ab:95:75:28:9c:a5:9f:0e:17:d4:0b:ea:05:c3:1f

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 4, 2022 - Jan 1, 2029

Minor OS version

Major OS version

Entry point

45002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject GetModuleHandleA CreateThread GetProcAddress VirtualAllocEx RaiseException GetCurrentThreadId IsProcessorFeaturePresent GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW MultiByteToWideChar WakeAllConditionVariable SleepConditionVariableSRW InitOnceComplete InitOnceBeginInitialize GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WideCharToMultiByte CloseHandle QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateFileW RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

d22916783f7be996014ec203f580841a4c33704adb72293cc0b72c537d1b95b4

PE Signature issue

kernel32

generic