a62234e5d6cdc7c70736565a9654f430N

Sharing

Copy URL Twitter E-mail

General

Target
a62234e5d6cdc7c70736565a9654f430N
Size 368KB
Sample240914-vt7ecawcpf
SHA256 015e11452fb82fd2fc2a72911a640fdaf27704b4d2aa4c4e31b23378bae29432
MD5 a62234e5d6cdc7c70736565a9654f430
SHA1 38aa43ea5a8e1d27113de82792efca7b9c85e886
SHA512 629328bb80e1f8cfa15f8a2ec50923504ef2547c69450a950efdcb7485572dd5da99efcc7111a1fe719cd18aa41994db8e1893341d7cdbc7ef0f7856d3c2e35d
SSDEEP 6144:F7dtjUAFA9tkU6RrjBV+UdvrEFp7hK9e/:ddRP+t1GrjBjvrEH7/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a62234e5d6cdc7c70736565a9654f430N

.exe 368KB

a62234e5d6cdc7c70736565a9654f430N

IMPHASH c378962b68035db9610fbfa645378ab7
SHA256 015e11452fb82fd2fc2a72911a640fdaf27704b4d2aa4c4e31b23378bae29432
MD5 a62234e5d6cdc7c70736565a9654f430
SHA1 38aa43ea5a8e1d27113de82792efca7b9c85e886
SHA512 629328bb80e1f8cfa15f8a2ec50923504ef2547c69450a950efdcb7485572dd5da99efcc7111a1fe719cd18aa41994db8e1893341d7cdbc7ef0f7856d3c2e35d
SSDEEP 6144:F7dtjUAFA9tkU6RrjBV+UdvrEFp7hK9e/:ddRP+t1GrjBjvrEH7/
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

f9:20:73:09:03:c7:f4:74:00:22:c7:39:c1:30:55:de:49:df:f8:01

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Intel(R) USB eXtensible Host Controller Drivers,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

May 11, 2017

Subject

CN=Intel(R) USB eXtensible Host Controller Drivers,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

33:00:00:bb:82:e6:06:4f:29:dd:3c:e0:27:00:02:00:00:bb:82

Issuer

CN=Intel External Basic Issuing CA 3B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 10, 2017 - Jan 10, 2018

Subject

CN=Intel External Basic Issuing CA 3B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

61:2c:ff:88:00:01:00:00:00:10

Issuer

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 8, 2013 - Feb 8, 2018

Subject

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Serial Number

79:17:4a:a9:14:17:36:fe:15:a7:ca:9f:2c:ff:45:88

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Feb 1, 2013 - May 30, 2020

Subject

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Serial Number

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf

Issuer

CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 30, 2014 - Mar 17, 2021

Subject

CN=timestamp.intel.com,OU=Thales TSS ESN:E892-D055-162F+OU=Thales TSS ESN:E892-D055-162F,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

28:a1:1e:74:fc:0b:87:54:58:0f:50:95:4c:47:c9:4e:67:75:4f:28

Issuer

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 24, 2015 - Apr 24, 2018

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Serial Number

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 15, 2013 - Aug 15, 2023

Minor OS version

Major OS version

Entry point

5602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\qba2\workspace\7070\USB3Sakura_05.00.04.043.0\usb3_sakura\driver\Monitor\exe\Release\iusb3mon_exe.pdb

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiGetDeviceRegistryPropertyW

comctl32

ImageList_Create ImageList_ReplaceIcon

iusb3mon

_USB3MON_Close@4 _USB3MON_DeviceChange@12 _USB3MON_GetInterfaceVersion@8 _USB3MON_GetDeviceInfoW@20 _USB3MON_Create@12 _USB3MON_GetHostInfoW@20 _USB3MON_ForwardMessage@16

kernel32

SetStdHandle HeapSize LCMapStringW LCMapStringA GetStringTypeW CreateMutexW FreeLibrary InterlockedIncrement WaitForSingleObject SetEvent GlobalAlloc CreateFileW lstrcmpW lstrlenW ReleaseSemaphore InterlockedExchange GetLastError SetLastError GlobalFree CreateSemaphoreW CreateEventW WaitForMultipleObjects OpenEventW GetUserDefaultUILanguage ReleaseMutex CloseHandle GetVersion ResumeThread WriteConsoleA LoadLibraryExW ExitThread ResetEvent SuspendThread GetStringTypeA GetLocaleInfoA MultiByteToWideChar GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc VirtualAlloc HeapAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LoadLibraryA IsValidCodePage GetOEMCP GetACP GetCPInfo EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers CreateThread GetCurrentProcessId GetTickCount GetCurrentThreadId GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedDecrement Sleep ExitProcess HeapFree WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter

user32

SendMessageW DestroyWindow SetTimer GetMessageW PostQuitMessage PostMessageW KillTimer DialogBoxParamW LoadCursorW TranslateMessage RegisterClassExW LoadIconW SetDlgItemTextW ShowWindow CreateWindowExW UpdateWindow SetWindowTextW DefWindowProcW DispatchMessageW GetWindowRect GetDlgItem EndDialog GetDesktopWindow SetWindowPos LoadStringW

gdi32

GetStockObject

advapi32

RegOpenKeyExW RegSetValueExW RegCloseKey SetNamedSecurityInfoW RegQueryValueExW RegCreateKeyExW

shell32

Shell_NotifyIconW

Sharing

General

Malware Config

Signatures

File Explorer

a62234e5d6cdc7c70736565a9654f430N

PE Signature issue

setupapi

comctl32

iusb3mon

kernel32

user32

gdi32

advapi32

shell32

generic