a0a29d76b6b23135a6426d097f66a2f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a0a29d76b6b23135a6426d097f66a2f0N.exe
Size 1.8MB
Sample240817-mp52qa1ejd
SHA256 a387d62d510c6261f28de4ea0663ffce12ea59132f01b2938c7de4e92f2304f2
MD5 a0a29d76b6b23135a6426d097f66a2f0
SHA1 116f5b5645c88fdb198d4c5448a601d0575e7cf3
SHA512 11c338c4e06dbaced3b4aaa0483bcf5c458a87001beb778bc430cb5627976ece3945dfc343421e0d5c54976330f695e8c1a1f1c681c867c2badca7bcc8ce8759
SSDEEP 49152:QhumpOpRzsOV9bzmkSMDGtsFh29slh4Reer+WZ:Qhump6xlG6A
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a0a29d76b6b23135a6426d097f66a2f0N.exe

.exe 1.8MB

a0a29d76b6b23135a6426d097f66a2f0N.exe

IMPHASH 7573208674510652893809b0317e4eb4
SHA256 a387d62d510c6261f28de4ea0663ffce12ea59132f01b2938c7de4e92f2304f2
MD5 a0a29d76b6b23135a6426d097f66a2f0
SHA1 116f5b5645c88fdb198d4c5448a601d0575e7cf3
SHA512 11c338c4e06dbaced3b4aaa0483bcf5c458a87001beb778bc430cb5627976ece3945dfc343421e0d5c54976330f695e8c1a1f1c681c867c2badca7bcc8ce8759
SSDEEP 49152:QhumpOpRzsOV9bzmkSMDGtsFh29slh4Reer+WZ:Qhump6xlG6A
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ee:30:c7:21:f0:2a:b8:27:3b:a2:33:43:cd:7c:29:19:d9:2b:e1:8b:56:ed:8e:37:19:04:09:08:bd:fb:9c:9e

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Chains

May 26, 2023

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Serial Number

03:0f:a0:91:94:b2:2d:c5:1d:00:65:31:c9:c1:61:04

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 21, 2021 - Mar 17, 2025

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1354148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_GetIconSize ImageList_DrawEx _TrackMouseEvent InitCommonControlsEx

ws2_32

WSAGetLastError WSACleanup closesocket send recv socket connect WSAAsyncSelect setsockopt WSAStartup shutdown listen bind getpeername ntohs htons gethostbyname inet_addr accept getsockname

shlwapi

SHRegGetUSValueW PathIsRootW PathCombineW PathRemoveFileSpecW

kernel32

QueryPerformanceFrequency ExitProcess SetConsoleScreenBufferSize SetStdHandle AllocConsole FreeConsole SetFilePointer FileTimeToSystemTime GetSystemTime FreeResource LockResource LoadResource SizeofResource GetSystemDefaultLangID LoadLibraryA TerminateProcess OpenProcess SetLastError HeapAlloc GetProcessHeap HeapFree VirtualAlloc VirtualFree SetErrorMode MoveFileExW GlobalFree GlobalUnlock QueryPerformanceCounter GlobalAlloc GetFileSize GetThreadPriority FreeLibrary LocalFileTimeToFileTime SystemTimeToFileTime FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime WaitForMultipleObjects GetSystemInfo GetVersionExA LocalFree LocalAlloc ConnectNamedPipe GetTimeZoneInformation MulDiv CompareStringA GetModuleHandleA GetModuleFileNameA GetWindowsDirectoryA GetSystemDirectoryA InterlockedExchange RtlUnwind SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetStartupInfoA GetCommandLineA CreateThread ExitThread WriteFile FlushFileBuffers GetStdHandle GetFileType GetConsoleScreenBufferInfo SetConsoleTextAttribute DeviceIoControl GetOverlappedResult ResetEvent Sleep FindNextChangeNotification GetFileInformationByHandle GetLocalTime FindCloseChangeNotification FindClose GetSystemTimeAsFileTime GetCurrentThread SetThreadPriority InitializeCriticalSection WaitForSingleObject DeleteCriticalSection EnterCriticalSection GetTickCount LeaveCriticalSection SetEvent GetCommandLineW GetCurrentThreadId ReadFile GetLastError CloseHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapReAlloc HeapDestroy HeapCreate GetACP GetOEMCP FreeEnvironmentStringsA GetEnvironmentStrings SetHandleCount GetCurrentProcessId LCMapStringA GetStringTypeA GetLocaleInfoA HeapSize GlobalLock

user32

SetCapture ChangeClipboardChain DrawEdge DrawFrameControl EqualRect GetSubMenu GetMenu SetClipboardViewer EnumWindows ActivateKeyboardLayout IsDlgButtonChecked SetScrollInfo UpdateWindow ScrollWindowEx SetDlgItemInt GetMenuItemID RemoveMenu GetMenuState GetMenuDefaultItem EnableMenuItem AdjustWindowRect GetSysColorBrush OffsetRect InvalidateRgn MessageBeep SetCursorPos GetDlgItemInt GetDlgCtrlID GetDesktopWindow ValidateRect CreateIconIndirect GetCursorPos CreateMenu SetMenuDefaultItem TrackPopupMenu DestroyMenu KillTimer GetDoubleClickTime RegisterHotKey UnregisterHotKey GetLastActivePopup OpenIcon GetForegroundWindow SetCursor SetActiveWindow BringWindowToTop EnumChildWindows CheckDlgButton GetKeyboardLayoutList GetScrollInfo InvalidateRect ClientToScreen ScreenToClient GetKeyState IsIconic GetWindowPlacement IsZoomed GetParent CopyRect EmptyClipboard SetClipboardData SetFocus PtInRect SetForegroundWindow BeginPaint EndPaint OpenClipboard CloseClipboard IsWindowVisible GetAsyncKeyState FillRect IsWindowEnabled GetFocus GetNextDlgTabItem SetWindowPos GetMenuItemCount CreatePopupMenu DeleteMenu AdjustWindowRectEx GetDlgItem GetWindowRect MapWindowPoints IntersectRect GetDC ReleaseDC WaitMessage UnhookWindowsHookEx CallNextHookEx TranslateMessage GetSystemMetrics GetClientRect GetCapture ReleaseCapture ShowWindow SetMenu RedrawWindow GetMessagePos RegisterWindowMessageA AttachThreadInput ReplyMessage GetSysColor EndDialog DestroyIcon SetTimer DestroyWindow GetWindowThreadProcessId IsWindow GetKeyboardLayout PostQuitMessage

gdi32

BitBlt CreateCompatibleDC GetTextAlign SetStretchBltMode GetDeviceCaps StretchDIBits SelectClipRgn StretchBlt SetTextAlign CreateCompatibleBitmap OffsetClipRgn OffsetRgn CombineRgn GetDCOrgEx GetRandomRgn GetRegionData ExtCreateRegion GetStockObject GetNearestColor CreateSolidBrush CreateRectRgn CreateDIBSection GetCurrentObject ExcludeClipRect RectVisible DeleteDC SetBkMode CreateBitmapIndirect CreatePatternBrush SetBrushOrgEx SetBkColor SetTextColor PatBlt SelectObject GetDIBits DeleteObject

comdlg32

CommDlgExtendedError

advapi32

RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW DeleteService ControlService RegOpenKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceConfigW RegCloseKey QueryServiceStatusEx RegisterEventSourceW ReportEventW DeregisterEventSource CreateServiceW StartServiceW OpenSCManagerW OpenServiceW CloseServiceHandle SetServiceStatus

shell32

DragFinish ord16 DragQueryPoint SHGetDesktopFolder DragAcceptFiles SHGetSpecialFolderLocation

ole32

CoTaskMemFree OleUninitialize OleInitialize CoCreateInstance CoInitializeEx CoUninitialize CLSIDFromString CreateStreamOnHGlobal CoTaskMemAlloc RevokeDragDrop DoDragDrop ReleaseStgMedium RegisterDragDrop

Sharing

General

Malware Config

Signatures

File Explorer

a0a29d76b6b23135a6426d097f66a2f0N.exe

PE Signature issue

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

generic