e3f117d1daf7bb6d8b0003c7e5803ea0N[.]exe

General

Target
e3f117d1daf7bb6d8b0003c7e5803ea0N.exe
Size 364KB
Sample240817-cw679asbqa
SHA256 149745a1cf597a9fa7c7235ae51d00d0186748377bac3e68ff18d98ebd8a66c9
MD5 e3f117d1daf7bb6d8b0003c7e5803ea0
SHA1 ad4e46341dd247533e67bade969d80433ea7c180
SHA512 284176ffa7e3c4acfdc630c9d08f53dfb33fc117f4a7b2d64a14bc8034532a0f9d59e332dcd01c1cd77e843535c354ada84c38d6e52c2bf00791a71f896ab372
SSDEEP 6144:i++3nuxe3py3a+4QWA4HYcOY/Q/YgvaUAAO1g2tYeBV+UdvrEFp7hKSq:iVnu83py3aqDc9SAeeBjvrEH7i
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e3f117d1daf7bb6d8b0003c7e5803ea0N.exe

.exe 364KB

e3f117d1daf7bb6d8b0003c7e5803ea0N.exe

IMPHASH 66429f68f8174f6c6f55ada76f0fcfff
SHA256 149745a1cf597a9fa7c7235ae51d00d0186748377bac3e68ff18d98ebd8a66c9
MD5 e3f117d1daf7bb6d8b0003c7e5803ea0
SHA1 ad4e46341dd247533e67bade969d80433ea7c180
SHA512 284176ffa7e3c4acfdc630c9d08f53dfb33fc117f4a7b2d64a14bc8034532a0f9d59e332dcd01c1cd77e843535c354ada84c38d6e52c2bf00791a71f896ab372
SSDEEP 6144:i++3nuxe3py3a+4QWA4HYcOY/Q/YgvaUAAO1g2tYeBV+UdvrEFp7hKSq:iVnu83py3aqDc9SAeeBjvrEH7i
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

d6:8b:33:d1:ae:8a:13:75:b3:cd:7d:7b:6c:dc:34:3d:28:15:70:c4:32:14:ff:49:0e:7f:45:76:b0:14:74:15

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Dropbox\, Inc,O=Dropbox\, Inc,L=San Francisco,ST=California,C=US

Chains

Mar 2, 2024

CN=Dropbox\, Inc,O=Dropbox\, Inc,L=San Francisco,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Dropbox\, Inc,O=Dropbox\, Inc,L=San Francisco,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Dropbox\, Inc,O=Dropbox\, Inc,L=San Francisco,ST=California,C=US

Serial Number

03:8a:4a:4c:4d:aa:6a:ad:4c:64:bc:63:bf:08:2c:4d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 25, 2024 - Feb 13, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

77119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DropboxUpdateProxy32.pdb

ole32

CLSIDFromProgID CoCreateInstance CoInitializeEx

oleaut32

SysAllocString VariantClear

shell32

CommandLineToArgvW

kernel32

TlsSetValue CreateFileW HeapSize ReadConsoleW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSectionEx GetCommandLineW LocalFree WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCommandLineA RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue WriteConsoleW TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType HeapReAlloc LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP

Sharing

General

Malware Config

Signatures

File Explorer

e3f117d1daf7bb6d8b0003c7e5803ea0N.exe

PE Signature issue

ole32

oleaut32

shell32

kernel32

generic