93a4c3d458ad3931a2b9d903fd7cf4ab3a3fc6f828fc935dc2306d2b00b74204N

Sharing

Copy URL

Twitter E-mail

General

Target

93a4c3d458ad3931a2b9d903fd7cf4ab3a3fc6f828fc935dc2306d2b00b74204N
Size

2.0MB
MD5

93076f9d466407ecb2d962bdfd5b3930
SHA1

f4561fe97f593c99ca7b20458406e6234799e1ee
SHA256

93a4c3d458ad3931a2b9d903fd7cf4ab3a3fc6f828fc935dc2306d2b00b74204
SHA512

2aa50d5a44b628031d5443523f4ad6724934f348db4ec04ea8c17aedb58e38ff4103d61279a07f56ab70a1e22527a0e862d4cd5c2cf097f8a5068c59d291e385
SSDEEP

49152:R1pHx7E1iYajPUFVpYqW8X7mnaVQQ2qaC5qm/AY8fuGhJ:Z5RrTUFVmqWI7+aVQQ2qaC5b/6fus

Score

1^/10

Malware Config

Signatures

Files

93a4c3d458ad3931a2b9d903fd7cf4ab3a3fc6f828fc935dc2306d2b00b74204N
.exe windows:6 windows x86 arch:x86

4d61ce667bfae71a270ffa27bbbacda0

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-01-2023 00:00

Not After

24-01-2026 23:59

Subject

CN=Solid State Networks I\, LLC,O=Solid State Networks I\, LLC,L=Phoenix,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-01-2023 00:00

Not After

24-01-2026 23:59

Subject

CN=Solid State Networks I\, LLC,O=Solid State Networks I\, LLC,L=Phoenix,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:45:25:ba:b9:46:48:e9:45:95:23:2a:db:0e:e1:8c:97:39:f2:27:dd:83:ba:cb:b3:22:c7:da:43:c6:dd:0d
Signer

Actual PE Digest

06:45:25:ba:b9:46:48:e9:45:95:23:2a:db:0e:e1:8c:97:39:f2:27:dd:83:ba:cb:b3:22:c7:da:43:c6:dd:0d

Digest Algorithm

sha256

PE Digest Matches

true

1b:f8:f7:bd:8a:16:af:dc:03:ed:40:03:77:6d:f9:50:ce:0d:58:78
Signer

Actual PE Digest

1b:f8:f7:bd:8a:16:af:dc:03:ed:40:03:77:6d:f9:50:ce:0d:58:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\actions-runner-3\_work\client\client\build\MinSizeRel\solsta_cli.pdb

Imports

msi

ord169
ord137
ord88
ord141

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetKnownFolderPath
SHGetMalloc
ShellExecuteExW

user32

AdjustWindowRectEx
GetDesktopWindow
LoadCursorW
LoadIconW
MonitorFromWindow
GetMonitorInfoW
RegisterClassExW
SendMessageTimeoutW
SetWindowLongW
GetWindowLongW
DefWindowProcW
GetShellWindow
GetKeyState
IsWindowVisible
EnumDisplayDevicesW
GetWindowThreadProcessId
GetClassNameW
EnumWindows
GetWindowTextW
ReleaseDC
PostMessageW
CreateWindowExW
IsWindow
DestroyWindow
GetDC

bcrypt

BCryptGetProperty
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptEncrypt
BCryptDecrypt
BCryptImportKey
BCryptDestroyKey
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDuplicateHash
BCryptDestroyHash
BCryptGenRandom
BCryptOpenAlgorithmProvider

advapi32

RegEnumValueW
CreateProcessWithTokenW
OpenProcessToken
AccessCheck
AdjustTokenPrivileges
AllocateAndInitializeSid
CreateRestrictedToken
CreateWellKnownSid
DuplicateToken
DuplicateTokenEx
EqualSid
FreeSid
GetFileSecurityW
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
MapGenericMask
SetSecurityDescriptorDacl
SetTokenInformation
LookupPrivilegeValueA
OpenThreadToken
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
SetEntriesInAclW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupPrivilegeValueW
CredFree
CredDeleteW
CredReadW
CredWriteW
ConvertStringSidToSidW
GetUserNameW

iphlpapi

GetExtendedTcpTable
GetAdaptersAddresses

crypt32

CertFreeCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CryptStringToBinaryW
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertCreateCertificateContext

dbghelp

SymFromAddr
SymInitialize

kernel32

SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
TryAcquireSRWLockExclusive
FreeLibraryWhenCallbackReturns
CloseThreadpoolWork
GetModuleHandleExW
GetStringTypeW
GetExitCodeThread
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetFileType
SetStdHandle
CreateThread
ExitThread
FreeLibraryAndExitThread
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
GetCommandLineA
WakeConditionVariable
UnhandledExceptionFilter
WakeAllConditionVariable
GetCommandLineW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
HeapReAlloc
HeapSize
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeConsole
GetCurrentProcess
GetSystemTimeAsFileTime
GetTickCount64
GetModuleHandleW
GetStdHandle
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDiskFreeSpaceW
GetFileAttributesW
GetFileAttributesExW
GetLongPathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
WriteFile
GetTempPathW
IsDebuggerPresent
OutputDebugStringW
CloseHandle
RaiseException
GetLastError
GetOverlappedResult
WaitForSingleObject
Sleep
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
SwitchToThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
GetProcessId
OpenProcess
GetNativeSystemInfo
VirtualQuery
FreeLibrary
FreeResource
GetModuleFileNameW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
FormatMessageA
CopyFileExW
MoveFileExW
MoveFileWithProgressW
FileTimeToSystemTime
SystemTimeToFileTime
GetFileInformationByHandleEx
GetLocaleInfoEx
QueryDosDeviceW
HeapAlloc
HeapFree
GetProcessHeap
DeviceIoControl
CreateProcessW
InitializeProcThreadAttributeList
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
GlobalMemoryStatusEx
GetSystemDirectoryW
GetWindowsDirectoryW
IsWow64Process
LoadLibraryW
LocalAlloc
LocalFree
SetThreadExecutionState
QueryFullProcessImageNameW
CreateSymbolicLinkW
AllocConsole
WriteConsoleW
SetConsoleCtrlHandler
SetConsoleTitleW
K32GetModuleFileNameExW
K32GetProcessImageFileNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ReadFile
SetFilePointerEx
SetLastError
IsProcessorFeaturePresent
SetEvent
ResetEvent
CreateEventW
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FlushFileBuffers
SetHandleInformation
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
PeekNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
ReleaseSemaphore
CreateSemaphoreW
MulDiv
GetEnvironmentVariableA
FlsAlloc
FlsSetValue
FlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessTimes
GetCurrentProcessorNumber
GetSystemInfo
VirtualAlloc
VirtualFree
GetLargePageMinimum
LoadLibraryA
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
WriteConsoleA
GetConsoleScreenBufferInfo
GlobalFree
LoadLibraryExA
CreateThreadpool
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
CloseThreadpool
CreateThreadpoolWork
SubmitThreadpoolWork
MultiByteToWideChar
WideCharToMultiByte
CreateEventA
FormatMessageW
GetTickCount
InitializeCriticalSectionEx
GetModuleHandleA
SleepEx
WaitForSingleObjectEx
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx

winhttp

WinHttpGetProxyForUrl
WinHttpSetStatusCallback
WinHttpCloseHandle
WinHttpOpen

wininet

InternetQueryOptionW

ws2_32

inet_ntop
inet_pton
WSASocketW
WSACloseEvent
WSASetLastError
WSACreateEvent
htonl
htons
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
accept
WSASend
WSARecv
WSAIoctl
WSAGetOverlappedResult
getnameinfo
freeaddrinfo
getaddrinfo
gethostname
socket
shutdown
setsockopt
send
select
recv
ntohs
ntohl
listen
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind

gdi32

SetPixelFormat
GetDeviceCaps
ChoosePixelFormat

ole32

CoUninitialize
OleInitialize
CoSetProxyBlanket
CoInitialize
OleUninitialize
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoInitializeEx
CLSIDFromProgID

oleaut32

VariantClear
VariantInit
SafeArrayGetElement
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysAllocString
SysFreeString

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d61ce667bfae71a270ffa27bbbacda0

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7eCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7eCertificate

Extended Key Usages

Key Usages

06:45:25:ba:b9:46:48:e9:45:95:23:2a:db:0e:e1:8c:97:39:f2:27:dd:83:ba:cb:b3:22:c7:da:43:c6:dd:0dSigner

1b:f8:f7:bd:8a:16:af:dc:03:ed:40:03:77:6d:f9:50:ce:0d:58:78Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msi

shell32

user32

bcrypt

advapi32

iphlpapi

crypt32

dbghelp

kernel32

winhttp

wininet

ws2_32

gdi32

ole32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 322KB - Virtual size: 321KB

.data Size: 24KB - Virtual size: 82KB

.rsrc Size: 74KB - Virtual size: 74KB

.reloc Size: 70KB - Virtual size: 69KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7e
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

08:e2:39:f5:6f:42:c7:92:8a:4d:ed:5e:66:9d:46:7e
Certificate

06:45:25:ba:b9:46:48:e9:45:95:23:2a:db:0e:e1:8c:97:39:f2:27:dd:83:ba:cb:b3:22:c7:da:43:c6:dd:0d
Signer

1b:f8:f7:bd:8a:16:af:dc:03:ed:40:03:77:6d:f9:50:ce:0d:58:78
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 322KB - Virtual size: 321KB

.data
Size: 24KB - Virtual size: 82KB

.rsrc
Size: 74KB - Virtual size: 74KB

.reloc
Size: 70KB - Virtual size: 69KB