74429fb6ea0a5b441959e279a63ce83b28f8b98ab39fc6bc5c7d76c1c3414a55[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

74429fb6ea0a5b441959e279a63ce83b28f8b98ab39fc6bc5c7d76c1c3414a55.exe
Size

14.0MB
MD5

a32b148fbdd14fb245c9ae6e16a83fd2
SHA1

df053e2ac6f0645f7e6364becdbe2e4c9b297b9b
SHA256

74429fb6ea0a5b441959e279a63ce83b28f8b98ab39fc6bc5c7d76c1c3414a55
SHA512

f8fc52e26ee5ff05b20d6f08f0a9db9ba383884d7e70c47f29ee971b4438432232355bc8390c4627faa05680959bb8e86cb8bb43f8543e69626960c9dd1b975b
SSDEEP

98304:Y4iorWJWdH7blug/joMOfnkg0EmX7xxA9JWp5cZVO6kocwfS:OorWJWdjKiEmV2/JHS

Score

1^/10

Malware Config

Signatures

Files

74429fb6ea0a5b441959e279a63ce83b28f8b98ab39fc6bc5c7d76c1c3414a55.exe
.exe windows:6 windows x86 arch:x86

98518d11dc38b6eaf5e68392a936017f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2d
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/12/2022, 00:00

Not After

08/01/2026, 23:59

Subject

CN=Chengdu XiaoShanHu Information Technology Co.\,Ltd.,O=Chengdu XiaoShanHu Information Technology Co.\,Ltd.,L=Chengdu,ST=Sichuan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2d
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/12/2022, 00:00

Not After

08/01/2026, 23:59

Subject

CN=Chengdu XiaoShanHu Information Technology Co.\,Ltd.,O=Chengdu XiaoShanHu Information Technology Co.\,Ltd.,L=Chengdu,ST=Sichuan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:ee:a8:33:45:39:43:3d:6e:ce:95:a7:20:25:01:d6:1e:b1:12:f1:8e:da:4c:b5:0f:ad:d6:39:c6:47:e8:de
Signer

Actual PE Digest

ed:ee:a8:33:45:39:43:3d:6e:ce:95:a7:20:25:01:d6:1e:b1:12:f1:8e:da:4c:b5:0f:ad:d6:39:c6:47:e8:de

Digest Algorithm

sha256

PE Digest Matches

false

71:32:5a:c9:08:4e:c3:cb:69:4f:fd:30:e6:81:17:05:08:34:c3:77
Signer

Actual PE Digest

71:32:5a:c9:08:4e:c3:cb:69:4f:fd:30:e6:81:17:05:08:34:c3:77

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\build\fah\windows-10-32bit-client-release\windows-10-32bit-client-release\fah-viewer\build\FAHViewer.exe.pdb

Imports

opengl32

glClearDepth
wglGetCurrentDC
wglCreateContext
wglGetProcAddress
glReadBuffer
wglDeleteContext
wglMakeCurrent
glDrawBuffer
glViewport
glGetBooleanv
glGetIntegerv
glPopMatrix
glPopAttrib
glEnd
glMatrixMode
glLoadIdentity
glColor4fv
glBegin
glVertex2i
glRasterPos2i
glColor4f
glDisable
glPushMatrix
glOrtho
glPushAttrib
glPopClientAttrib
glPushClientAttrib
glTranslatef
glVertex2f
glBitmap
glPixelStorei
glFlush
glTexCoordPointer
glNormalPointer
glTexCoord2d
glNewList
glListBase
glGenLists
glEndList
glDeleteLists
glCallLists
glBlendFunc
glVertexPointer
glMultMatrixf
glLoadMatrixf
glLightModelfv
glGetFloatv
glEnableClientState
glDrawArrays
glDisableClientState
glCopyTexSubImage2D
glColorMask
glVertex3f
glShadeModel
glScissor
glScalef
glRotatef
glRotated
glRectf
glPolygonMode
glMaterialfv
glLineWidth
glLightfv
glGetDoublev
glFrontFace
glDepthMask
glDepthFunc
glColor3ub
glColor3f
wglGetCurrentContext
glClearColor
glTexParameteri
glTexImage2D
glTexEnvf
glTexCoord2f
glGenTextures
glEnable
glDeleteTextures
glClear
glGetString
glBindTexture

winmm

timeBeginPeriod
timeGetTime
joyGetPosEx
joyGetDevCapsA
timeEndPeriod

ws2_32

htonl
htons
inet_addr
inet_ntoa
ntohl
ntohs
gethostbyaddr
gethostbyname
getservbyport
getservbyname
select
__WSAFDIsSet
socket
shutdown
setsockopt
send
recv
listen
ioctlsocket
connect
closesocket
bind
accept
WSAStartup
WSASetLastError
WSAGetLastError

user32

LoadStringA
GetLastInputInfo
WaitForInputIdle
GetFocus
PtInRect
SetCursor
SetClassLongA
SetCursorPos
SetRect
ChangeDisplaySettingsExA
EnumDisplaySettingsA
GetKeyState
GetMessageA
DispatchMessageA
SetActiveWindow
ReleaseDC
GetDesktopWindow
LoadIconA
GetClassInfoA
RegisterClassA
GetSystemMetrics
GetDC
LoadCursorA
ShowCursor
UpdateWindow
UnregisterClassA
GetClientRect
CreateWindowExA
DefWindowProcA
MoveWindow
GetMonitorInfoA
SetWindowTextA
GetWindowLongA
ClientToScreen
CopyRect
SetWindowLongA
OffsetRect
ShowWindow
EnumDisplayMonitors
MonitorFromRect
SetWindowPos
DestroyWindow
GetWindowRect
AdjustWindowRectEx
ToAscii
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
LoadStringW
ScreenToClient
MsgWaitForMultipleObjects
GetKeyboardState
GetAsyncKeyState
RedrawWindow
SetFocus
TranslateMessage
SetCapture
PeekMessageA
PostQuitMessage
ReleaseCapture
InvalidateRect
ChildWindowFromPoint
GetCursorPos
BeginPaint
EndPaint

gdi32

GetPixelFormat
ChoosePixelFormat
SetPixelFormat
GetDeviceCaps
DeleteDC
CreateDCA
SwapBuffers
CreateCompatibleBitmap
DeleteObject
GetDIBits
GetObjectA

advapi32

RegisterEventSourceA
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
ReportEventA

kernel32

HeapAlloc
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetStdHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFullPathNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
HeapReAlloc
GetDriveTypeW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
RtlUnwind
RaiseException
InterlockedFlushSList
InterlockedPushEntrySList
GetACP
ReadConsoleW
GetConsoleCP
GetCurrentThread
HeapFree
GetModuleFileNameW
GetCommandLineA
PeekNamedPipe
GetCommandLineW
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
WaitForSingleObjectEx
ResetEvent
SetEvent
GetCPInfo
GetStringTypeW
GetLocaleInfoW
CompareStringW
GetModuleHandleW
TlsFree
TlsSetValue
GetDateFormatW
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
DeleteCriticalSection
FlushConsoleInputBuffer
GlobalMemoryStatus
QueryPerformanceCounter
FindNextFileA
FindFirstFileA
GetFileType
SystemTimeToFileTime
GetSystemTime
MultiByteToWideChar
AreFileApisANSI
SetFilePointer
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
GetStringTypeExW
MoveFileExW
CopyFileW
CreateDirectoryExW
GetWindowsDirectoryW
DeviceIoControl
SetFileTime
SetFilePointerEx
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
SetConsoleMode
GetConsoleMode
LoadLibraryA
FormatMessageA
FreeLibrary
GetSystemDirectoryA
GetSystemPowerStatus
SetThreadExecutionState
GetTickCount
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetProcessHeap
OutputDebugStringA
FindFirstFileExA
OutputDebugStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
TlsGetValue
LocalFree
GetModuleHandleA
GetProcAddress
ReadFile
WriteFile
GetCommTimeouts
BuildCommDCBA
CreateFileA
GetCommState
CloseHandle
SetCommTimeouts
SetCommState
FlushFileBuffers
ReleaseMutex
WaitForSingleObject
CreateMutexA
SetConsoleCtrlHandler
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
SetPriorityClass
OpenProcess
GetModuleFileNameA
MoveFileExA
GenerateConsoleCtrlEvent
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CreateEventA
SignalObjectAndWait
CreateSemaphoreA
Sleep
GetSystemTimeAsFileTime
SwitchToThread
CreateThread
GetCurrentThreadId
TerminateThread
GetLastError
SetLastError
HeapSize
FormatMessageW
WideCharToMultiByte
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
SetHandleInformation
CreatePipe
CreateProcessA

glu32

gluOrtho2D
gluLookAt
gluProject
gluPerspective

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9.8MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 530KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98518d11dc38b6eaf5e68392a936017f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2dCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2dCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ed:ee:a8:33:45:39:43:3d:6e:ce:95:a7:20:25:01:d6:1e:b1:12:f1:8e:da:4c:b5:0f:ad:d6:39:c6:47:e8:deSigner

71:32:5a:c9:08:4e:c3:cb:69:4f:fd:30:e6:81:17:05:08:34:c3:77Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opengl32

winmm

ws2_32

user32

gdi32

advapi32

kernel32

glu32

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 9.8MB - Virtual size: 9.8MB

.data Size: 154KB - Virtual size: 179KB

.gfids Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.reloc Size: 530KB - Virtual size: 530KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2d
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:cf:15:4a:d4:c3:4e:db:a5:81:85:4d:9f:75:0f:2d
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ed:ee:a8:33:45:39:43:3d:6e:ce:95:a7:20:25:01:d6:1e:b1:12:f1:8e:da:4c:b5:0f:ad:d6:39:c6:47:e8:de
Signer

71:32:5a:c9:08:4e:c3:cb:69:4f:fd:30:e6:81:17:05:08:34:c3:77
Signer

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 9.8MB - Virtual size: 9.8MB

.data
Size: 154KB - Virtual size: 179KB

.gfids
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.reloc
Size: 530KB - Virtual size: 530KB