178c2e93d00490bab87add64fc170000N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
178c2e93d00490bab87add64fc170000N.exe
Size 351KB
Sample240816-b73tjaycjf
SHA256 4ab6ad9355fe26e7cec685cc781466cd87171036162f07728d577782359c5551
MD5 178c2e93d00490bab87add64fc170000
SHA1 fe74aa5ef044f1814ffae78020a7c6e275f210e6
SHA512 7d5081f0f37329fff88956bf4b77512c52149c3d34d113a7228bde6a026814c266426b07d9d89a86adc2cea81984aad764ebac5fe4e10b5dd7120c04514b7310
SSDEEP 6144:dr5DKX4B6GWIU3XYOGsBvpBV+UdvrEFp7hKcI:drRKg6GWdnpBjvrEH7I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

178c2e93d00490bab87add64fc170000N.exe

.dll 351KB

178c2e93d00490bab87add64fc170000N.exe

IMPHASH 391db90ecb01d36d779fe29280e5e140
SHA256 4ab6ad9355fe26e7cec685cc781466cd87171036162f07728d577782359c5551
MD5 178c2e93d00490bab87add64fc170000
SHA1 fe74aa5ef044f1814ffae78020a7c6e275f210e6
SHA512 7d5081f0f37329fff88956bf4b77512c52149c3d34d113a7228bde6a026814c266426b07d9d89a86adc2cea81984aad764ebac5fe4e10b5dd7120c04514b7310
SSDEEP 6144:dr5DKX4B6GWIU3XYOGsBvpBV+UdvrEFp7hKcI:drRKg6GWdnpBjvrEH7I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

42:81:c0:ac:d9:ac:9d:8a:98:14:6e:c4:c3:57:d5:8b:d8:cd:e9:fe

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 14, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2006 - Apr 26, 2012

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:46:9e:cb:00:04:00:00:00:65

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2006 - Oct 4, 2007

Minor OS version

Major OS version

Entry point

73458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

G:\office\Target\calligraphy\x86\ship\0\calligra.pdb

msvcr80

memmove vswprintf_s _vscwprintf _fpclass ??2@YAPAXI@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?terminate@@YAXXZ __clean_type_info_names_internal _crt_debugger_hook _onexit _lock __dllonexit _unlock _except_handler4_common __CppXcptFilter _adjust_fdiv _amsg_exit _initterm_e _initterm _decode_pointer _encoded_null _malloc_crt _encode_pointer ??_U@YAPAXI@Z memcpy memset _CxxThrowException __CxxFrameHandler3 ??_V@YAXPAX@Z ??3@YAXPAX@Z free

kernel32

IsDebuggerPresent MultiByteToWideChar LocalFree UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange GetProcessHeap GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter VirtualProtect CompareStringA CompareStringW FindResourceW SizeofResource LoadResource LockResource GetSystemDefaultLangID OutputDebugStringA GetModuleFileNameW SetLastError GetLastError FormatMessageW FindNextFileW WriteFile CreateFileW GetFileSize CloseHandle FindClose FindFirstFileW SetFilePointer ReadFile RaiseException FoldStringW GetLocaleInfoW GetStringTypeW LoadLibraryA GetModuleHandleA LoadLibraryW GetModuleHandleW GetProcAddress GetFileAttributesW MulDiv GetVersion SetUnhandledExceptionFilter

user32

SetTimer KillTimer LoadCursorW BringWindowToTop EndDialog IsWindowVisible LoadImageW IsChild GetMessagePos IsDialogMessageW GetMessageTime GetDlgCtrlID GetClassInfoExW UpdateWindow SendInput ClientToScreen SystemParametersInfoW SendMessageW DefWindowProcW CallWindowProcW RemovePropW BeginPaint EndPaint GetWindowDC PostMessageW GetKeyState IsWindowEnabled GetSysColorBrush MessageBoxW SetScrollInfo DialogBoxParamW CreateWindowExW RegisterClassExW GetNextDlgTabItem IsRectEmpty GetDesktopWindow CopyRect DestroyWindow GetActiveWindow GetWindowTextW DrawTextW EnableWindow OffsetRect GetDlgItem SendDlgItemMessageW MapWindowPoints GetWindowRect SetWindowPos ReleaseDC SetRect GetTopWindow GetWindow LoadStringW GetDC ReleaseCapture GetClientRect PtInRect SetCapture GetSysColor InflateRect GetFocus SetFocus GetParent GetNextDlgGroupItem SetWindowTextW ShowWindow FillRect DrawFocusRect InvalidateRect GetWindowLongW SetPropW SetWindowLongW GetPropW IsWindow

gdi32

SetTextColor GetDeviceCaps CreateCompatibleDC BitBlt DeleteDC ExtCreatePen GetStockObject CreatePen SelectObject Rectangle MoveToEx LineTo StrokeAndFillPath BeginPath CreateFontW CreateCompatibleBitmap CreateFontIndirectW GetTextExtentPoint32W SetBkColor GetFontUnicodeRanges AddFontResourceExW EnumFontFamiliesExW CreateSolidBrush SetPixel GetObjectW EndPath ExtTextOutW SetTextAlign DeleteObject SetBkMode

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey RegSetValueExW

oleaut32

VariantInit OleCreatePictureIndirect SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SafeArrayRedim SafeArrayDestroy VariantClear SysFreeString SysStringLen SysAllocString

shlwapi

PathRemoveFileSpecW

uxtheme

GetThemeColor CloseThemeData OpenThemeData

Sharing

General

Malware Config

Signatures

File Explorer

178c2e93d00490bab87add64fc170000N.exe

PE Signature issue

msvcr80

kernel32

user32

gdi32

advapi32

oleaut32

shlwapi

uxtheme

generic