B89BA7DD8D61CEDBACAA00AABEF600B7[.]exe

B89BA7DD8D61CEDBACAA00AABEF600B7.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 e1f193deaa71595b668320d294635988f66c0f1ab1ab218e08fe3ae87fe10838
MD5 b89ba7dd8d61cedbacaa00aabef600b7
SHA1 7ac8349aca0ff91f198c2ce971651972312a61cb
SHA512 8117892316189e4e9fc5ab1a10cc5c68c2be7fabfbff08db08e78a1e84838128198e81f30c05325b18b234bba9116afbe34e8d2fef2eb03f1c05329e8d573f5a
SSDEEP 24576:GzZYYYOHCKg3ADrO2paC5fgf+DcmRdU98IvFgxBHzfA69qLPvVixRXEiskKOdsUf:G2YRgm9paCyf+D2N6fuPvQ7KkKOINi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

bc:ce:17:27:76:98:79:48:49:c8:3a:99:f2:3c:f7:cd:ed:e1:91:77:80:ee:22:c4:e4:97:a6:44:1f:9c:1f:0d

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Aug 1, 2024

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=2-J,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

09:97:c5:6c:aa:59:05:53:94:d9:a9:cd:b8:be:eb:56

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 13, 2023 - Jan 16, 2026

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 19, 2024 - Jun 1, 2029

Minor OS version

0

Major OS version

5

Entry point

13333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ForumsAssists/Announcement

SHA256 803350809ac7cd3a1363f821e599468aae3e2025a56fbed9cf00cd1452172e25
MD5 4de13cc6be744404d2f9c384fd4eedf0
SHA1 c7e20e2184096dcfdedf3dc02f8b2c90b9d37097
SHA512 605a4ea44bea12c9a2b267b174a5a3e5d0e845e5c33ffd91ea80b44ae4643d986b71f8719081de45f27cb133bdbfcfca30b8f4afee82a783c18fb71470d26844
SSDEEP 1536:Qt9zhs3jvVcsN51VuOJ4jl/OKs4LzLWHQwyeireB:QrWjvmsNHVurp2KsIU0q
MD5 SHA1 SHA512 SSDEEP

ForumsAssists/Bikini

SHA256 ef891f3adf76369df74ff0ec3f6d39d95000fda02d9925898a2edc81f44d222b
MD5 621e0c200bead0377d4904c5fb9529a4
SHA1 c8bb35c548b3070e9981a9bd6f92c27ca5a2427c
SHA512 47f7e97935d6fb8501749180cd4229a8ef259c272e403309d7f2098ffd2bcdb2ea2a6e636c9d263c420420bbf1e1bd7f2184a2f004926273e83823082f7e1944
SSDEEP 1536:9ze5HQISwOf4ZwrZCfIsxrhBzY9fFZcFNzKoJ/:8HSwJMsxwPqzz7/
MD5 SHA1 SHA512 SSDEEP

ForumsAssists/Centres

SHA256 cc3319935a9e71266a6ecf6d50763e3ca226d516393ce41b7e2c72825eb01d81
MD5 af716392c15d3b628f62a15bf6b41d47
SHA1 760973f031972d42782b8c9950516472223ffeb1
SHA512 7904b74b768c50d90fa3a8aab6d8b3ac54a942e56d7d8166a31dc05b1713d69879aeb48db1ed4408ff93b7bbab4e7e4b1a7c5145de8b2ffc92c6df6bd3ff11ae
SSDEEP 1536:vlrMT7ooKWQiW7Wrl3ATnCFxGDSMhPm0P7jkWYh7D3dMDLFKTYoRHnd3PqCsaIBt:trMXYbWrSuimi7je9MN07hq4i7Wk
MD5 SHA1 SHA512 SSDEEP

ForumsAssists/Championship

SHA256 3bbee4e8a83d2a97a03ad78fa2e325b6973cbb4dd74df1dd3da4efbd9432e9a5
MD5 c5bf40d31c51043ba59eccc61c6751e3
SHA1 54eb06ca725445b2dac5543d10ff52789cf0b6e4
SHA512 804ad94ceaf48a3400ff8e62d9f8b2044884705ab073fae8bc7889149c7a37402aa77e720dcfa7c450ddf9dc21c4b58d675b165255e73c2fa7d50d63487a6228
MD5 SHA1 SHA512

ForumsAssists/Dawn

SHA256 01199308c8a481090a57df2031512fc2cfd81c004f017972225aabf29a53a70b
MD5 7b4cb2ad541b77823812dcf9aeae8c96
SHA1 6804054e9eb3b3465e720ed245a23ae126ea50b9
SHA512 69bec4c62175e61de164a76df345b1f875d7e8471253a9698bc04944787c5f089e2c0074a278945333f551ea79d90118a6fd94586880b327c333abe46fabc399
SSDEEP 1536:o3+iNqmXGbMSMBFGzeQkQ5FAdJqnPlTD30flewHq19vOq:ouiNq+GoSeGBkQbArIP6ewHaVH
MD5 SHA1 SHA512 SSDEEP

ForumsAssists/Early

SHA256 6cd36aaf3eec734be45b9886ed26f53f18cd33d4c179042e26d176d99c35bedd
MD5 ca8a07bcfb3340302e77646728bae087
SHA1 68ca6e2c19584644ce47d5edb705461b67ca7294
SHA512 e7ad2e190ebea9df638e4a0cdd7435bb246b58547e9c9cb1a64ae33012414deb0f6d46a608210df76d2c1e2955e681fb9fc525f58c5f2b77ecd470e196498945
SSDEEP 192:Rqo5V2u0A5x61w2K9Gg5lzLkol28WeVEfI0HIIcOIIt8xuqerf3BiFAL2:J8u0Bw79GgrkCwfHPD8x3ezxr2
MD5 SHA1 SHA512 SSDEEP

ForumsAssists/Spine

SHA256 d9fc4d46f98794486cbc9f981bd4147f73c72cd5dc3ff5c5c866351222ac8381
MD5 6823792d74fa54544f65f2f6cb6115c2
SHA1 9c33487a3967945f69ff8dd3f07f2180b6e97562
SHA512 41c15a86c945e5d1a75c588653098fbe7994f8c473c8273be807a4805a480bd4161101eb3e72586db919785cb7c1410a8200669f6af4faf2cb1f101978759eb4
SSDEEP 192:8/cIiudOLm1LKvMf/eaH3wvAps/GbETWLnY59Vi7eEf5jFELq3qIGil5:w3cLINeaHnETca94H5j+Lq3+iX
MD5 SHA1 SHA512 SSDEEP

HotmailSupplemental/Champagne

SHA256 3846d814c18fec2adb873968613d8a6f3551b4a668f718b07d94afe998b59391
MD5 f875b35886fc77b7328fccfc9138636a
SHA1 9551f2a883d75703cf548f8935744f01978872df
SHA512 7d9a502dbd01191fc26c19c532598a96feca34162c52c03cc3a0975a671646a6adb2409b330a7b559c3a5390a3907947ada0ff24987987e886aab040a3bd3a84
SSDEEP 1536:dwN7PZr61UecTfYqu3nN/pfVTXwKIuXOrGIrNqK8RKCR:dwPr61FcTBs/1yaXWkKQ
MD5 SHA1 SHA512 SSDEEP

HotmailSupplemental/Clause

SHA256 2cde7300091274a9b56d7d1d1a007d7d28069de6e18a306012e8343ca61cc969
MD5 a59fa94c3873ccaf40c4195b3de1ee7d
SHA1 18487c7fe87a2fdeb995354a57314957813e0216
SHA512 c2204e8fb35a09c782365d496d1e7a740b272b13985fadc420edd3521636e32db3694f0a62d7fda002799fb04febc5099bdec615a0f3e32f98bda8c7dd7b1610
SSDEEP 12288:vpVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:vT3E53Myyzl0hMf1tr7Caw8M01
MD5 SHA1 SHA512 SSDEEP

HotmailSupplemental/Observed

SHA256 6032859a9b7c4105c4b3419bcd156559aa988a123ff144d9f8986155a1f0e6f5
MD5 a4f6904d964001b8f134126502870ed5
SHA1 9a63647e5ad44b48ea76c930ea4037bb2fdbfb6a
SHA512 983949edba56c5c84cdde6335c5ca9b44cce9dd70161629486dd8c953c8dbc05326639a5bcf225c7df00002e52227c9bb0835b794b1fa575366d934d72f243c6
SSDEEP 1536:dEOtuK/MmUfV6nJVr/tEXFXMyfhnNxwX4P2Jb8zFL5po0De29U8IgsB:dEOtuKUmqV4J1/tEXVMSnNk4P2JSFN56
MD5 SHA1 SHA512 SSDEEP

HotmailSupplemental/Undertaken

SHA256 a7a8c867a2356fc2004618acbc185cad12fea3d81cc0a13fb880d27a19e6d0d2
MD5 1bcad4f6be3c38c006eef805488016c7
SHA1 34f48aa1c0bff392ac711accde61e8dacac5a10d
SHA512 664bc75da0a169cba117e34ef5937bcbc2d6080b3168d54e9b5ba8bdf3c922aaae7c96b09e8dfd850d8894bc2716aa17983ed6422799b75b4f552d13e37eeabf
SSDEEP 1536:3U+qorzvwYX+RAzBhLyeUlk/BjoTJGUT4YFDbM9R:3tDluRAzLLyNEB80UT4KM
MD5 SHA1 SHA512 SSDEEP

RayStunning/Banks

SHA256 7cf4ea7974c2395b8ce7c3329b47821f5d57d2a0934e99e433b3eab15ae61a5a
MD5 0cdbb01ed5595f4eda1621891aae36f0
SHA1 c33c7602ec64934b181c43c0e9dd5168a43cd4ad
SHA512 0cd892a4c659103673c138b993eabb215459b281f439a84718a425e8a89863bb2809f13e3d7716c57e821a534ad5acba04d77b5f6c8bcb73c381b10bae7b7f66
SSDEEP 1536:hw2wgBBR5mMwJI0whiazSyJASeTC1labduUqxhBLyuQeva7pD:dwgzREMZJhiazSydlabduU0HyupC7pD
MD5 SHA1 SHA512 SSDEEP

RayStunning/Blog

SHA256 79ac2066ad3058df43125a29308f90e49ee6c367cb71e7d53276effbd4678b6a
MD5 2199e5830f1fbb7eb4c2cabed53ffad8
SHA1 a81ff46eeb0f042a0401027cb933c627694036bc
SHA512 a15b5a52c7a1336cd016e960186c6d2328f4c18075fa54b01f35dabf3351816ccc3631684eaa91a763bf7aae6f914adeebc55a1bd20f5f1307a3c1493eddbdeb
SSDEEP 1536:fot1DwKox+hudeHjUq7vNGQWKl5R1KM5iGR0XHIJgSqZ5oQWRdVtOoYQ2lLR963I:gYKPuwH3lGGl5R1KqiGR0XHIJgS6TWRu
MD5 SHA1 SHA512 SSDEEP

RayStunning/Featured

SHA256 d9c28233273fbe75373b0d39a8241acdfdf47fdb721a11dc3dfd1b773839ff85
MD5 6f1bf6f00abd8f54dd6cfc6ccdcf3b3a
SHA1 2204108d8175456bc8cdeb72cec3785a9aa4458a
SHA512 2fe4a443ad41d1d5b1904d99bbff1cb30d616af101e5fe4530c352577014d6c37221f57c9a7a49443d8b4e51ad055f3aaf2dda8aca12d2d210ebca542bbac5d8
SSDEEP 1536:xmH++P01njRIibWn8xDoWIZF3CTCqPhhp/hSUp0aZEfA4tDiTvSUbITPUsv1z+vm:gHL81lRG8xD3IZdCTCmhnEbdkvSU8TsM
MD5 SHA1 SHA512 SSDEEP

RayStunning/Occurring

SHA256 ebac5bf9ebb8993ed785e40c627e513fcb1e5b7ba9b2d21182215e6229172642
MD5 327157512e3070b044f5a10dbc01416f
SHA1 f923956ca29726915cb214e16580540fdac28bb0
SHA512 c7e4043c65db83542d52b38463131b22f451bff7e916ed55fd3ddf6ee0c635a9e1d8f2e48a3c26e0f0b023d3eda7989f1d23a97849ed1d0882b0588cab510770
SSDEEP 1536:t9Tq/Kqr3ZzBSCy9mduNvvkCOK1eTAnT6ktY6QF+x:t92/Kazhy9mdovvk/K1IAT61F+x
MD5 SHA1 SHA512 SSDEEP

RayStunning/Provisions

SHA256 cd69b087fb22b31daf38c9e85b1fc2509d7f8233883a4b09a57620112bc30b7d
MD5 6571fab71e2ac835aac0c354f1c46a0f
SHA1 b332695a2173f0fc91c853297a8528cc463bfcfe
SHA512 6ddcdfd6158f97e8aa47e8311a871d4a40331acdb759844c497fba88e48b668969f0d91628bec665eaf8946481b2dc72b6b274f87969476042d637b51054fce0
SSDEEP 1536:rfelDi35ZOvos+lAbEFKIw44fSAQNnX3kWPcr3xjpRtYmhaAfPlvrw:ze0GH+lbNAMnXM3xjp/YmgAf9rw
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

B89BA7DD8D61CEDBACAA00AABEF600B7.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

ForumsAssists/Announcement

ForumsAssists/Bikini

ForumsAssists/Centres

ForumsAssists/Championship

ForumsAssists/Dawn

ForumsAssists/Early

ForumsAssists/Spine

HotmailSupplemental/Champagne

HotmailSupplemental/Clause

HotmailSupplemental/Observed

HotmailSupplemental/Undertaken

RayStunning/Banks

RayStunning/Blog

RayStunning/Featured

RayStunning/Occurring

RayStunning/Provisions