bc7c5fac890f94aed8f42845bf8302d0N

Sharing

Copy URL Twitter E-mail

General

Target
bc7c5fac890f94aed8f42845bf8302d0N
Size 208KB
Sample240826-mw29ea1ejp
SHA256 d22336db743e2a6f92bcdc50b78455203bb218c0100713ff0a57e78c7332097d
MD5 bc7c5fac890f94aed8f42845bf8302d0
SHA1 e0f49c06e386780facfd90bbb24a49f9000ed831
SHA512 df7310de922ffdb2465c9744cade7892b93655b55773d5f3e97eac8d053e0721e4eff69fb147378c6447b2cc211be82e9f8b2007696dd8dde568f000231aa541
SSDEEP 3072:FxIhTrPVvpcB1PF5VbGW5rGcf2lQBV+UdE+rECWp7hK25:FxIhjV81PdbGSGyBV+UdvrEFp7hKa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bc7c5fac890f94aed8f42845bf8302d0N

.exe 208KB

bc7c5fac890f94aed8f42845bf8302d0N

IMPHASH 24c825aa8f7dbc19a1fba3fa848fab94
SHA256 d22336db743e2a6f92bcdc50b78455203bb218c0100713ff0a57e78c7332097d
MD5 bc7c5fac890f94aed8f42845bf8302d0
SHA1 e0f49c06e386780facfd90bbb24a49f9000ed831
SHA512 df7310de922ffdb2465c9744cade7892b93655b55773d5f3e97eac8d053e0721e4eff69fb147378c6447b2cc211be82e9f8b2007696dd8dde568f000231aa541
SSDEEP 3072:FxIhTrPVvpcB1PF5VbGW5rGcf2lQBV+UdE+rECWp7hK25:FxIhjV81PdbGSGyBV+UdvrEFp7hKa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

71:e0:e6:ab:d3:07:f0:4a:7d:a7:9b:f1:4b:cd:fe:a0:37:07:4d:bd:c8:d1:a7:aa:60:e7:f1:d3:c5:d0:a0:1b

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

Chains

Apr 19, 2023

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

PE Signature issue

Digest

57:3b:e3:df:ce:b6:81:d8:72:69:e4:d3:08:96:fd:8f:5f:c8:80:8a

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

Chains

Apr 19, 2023

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

Serial Number

e0:4f:3f:5b:78:ca:4d:71:0f:15:8a:bf:fe:05:0f:97

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 3, 2022 - Nov 2, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=AOMEI International Network Limited,O=AOMEI International Network Limited,ST=Hong Kong,C=HK

Serial Number

e0:4f:3f:5b:78:ca:4d:71:0f:15:8a:bf:fe:05:0f:97

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 3, 2022 - Nov 2, 2025

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

19417

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\svn\BRCloudv2\trunk\output\win32\release\LoadDrv_Win32.pdb

kernel32

WinExec GetFullPathNameW Process32FirstW Process32NextW lstrcmpiW HeapAlloc GetProcessHeap DefineDosDeviceW LoadLibraryW CreateToolhelp32Snapshot GetLogicalDrives OpenProcess DeviceIoControl DeleteFileA GetSystemWindowsDirectoryW GetSystemInfo WideCharToMultiByte SetFilePointer GetModuleHandleW GetProcAddress GetVersionExW GetCurrentProcess LoadLibraryA OutputDebugStringW GetLastError DeleteFileW FreeLibrary SetErrorMode GetWindowsDirectoryW GetLogicalDriveStringsA GetModuleFileNameW Sleep GetCommandLineW WriteFile GetFileSizeEx SetFileAttributesW CloseHandle CreateFileW ReadFile GetFileAttributesW CreateDirectoryW HeapFree CreateFileA WriteConsoleW GetCommandLineA GetVersionExA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException EnterCriticalSection LeaveCriticalSection ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize VirtualAlloc HeapReAlloc RtlUnwind GetConsoleCP GetConsoleMode InitializeCriticalSection FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

wsprintfW

advapi32

DuplicateTokenEx GetSecurityDescriptorDacl RevertToSelf SetEntriesInAclW SetKernelObjectSecurity OpenProcessToken MakeAbsoluteSD GetKernelObjectSecurity BuildExplicitAccessWithNameW LookupPrivilegeValueW GetUserNameW ImpersonateLoggedOnUser SetSecurityDescriptorDacl AdjustTokenPrivileges RegCreateKeyExW StartServiceW OpenSCManagerW RegOpenKeyW OpenServiceW RegQueryValueExW DeleteService RegDeleteValueW CloseServiceHandle RegSetValueExW RegCloseKey QueryServiceStatus RegOpenKeyExW ControlService CreateServiceW

shell32

CommandLineToArgvW SHChangeNotify

Sharing

General

Malware Config

Signatures

File Explorer

bc7c5fac890f94aed8f42845bf8302d0N

PE Signature issue

PE Signature issue

kernel32

user32

advapi32

shell32

generic