89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2[.]exe

89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2
MD5 06342512b7bcdfdda8d6ea8e2d5a24e4
SHA1 5a656ac27d5a03ee63f08dd499bacd01e0a12c3f
SHA512 5824c39a30b7acacd949812bafcf99afcdc95361b2196567aae4e1f2445803c37971a572537c132a01b930e204745ccf7f082386147ea3b611c745eef2ea3eb4
SSDEEP 24576:StmrKn0UVWKbcO1wZ8Baw0QD4Iv2kSen/rhSjJVC6h2Lg2np2uGVemv+Gl9o:8O6rIO1k8L0QcIv7nThSjeuKzDAemu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

88:bf:eb:1d:3b:8f:9f:2f:f5:b1:6e:8d:f0:fa:b9:d4:fd:74:58:0b:6b:22:61:61:15:6c:fc:59:d9:e1:c2:85

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=6703101,CN=Signal Messenger\, LLC,O=Signal Messenger\, LLC,L=Mountain View,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 12, 2024

SERIALNUMBER=6703101,CN=Signal Messenger\, LLC,O=Signal Messenger\, LLC,L=Mountain View,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

SERIALNUMBER=6703101,CN=Signal Messenger\, LLC,O=Signal Messenger\, LLC,L=Mountain View,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

4e:f1:c2:d6:7b:37:51:79:57:f4:2e:8d

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2024 - Sep 12, 2027

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 26, 2024 - Nov 25, 2035

Minor OS version

0

Major OS version

5

Entry point

14511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

233KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 c56f910b6057a45fbe5062083358ecddf9e603cdb2f2152a95fe80bdc22a4461
MD5 77f0839f8ebea31040e462523e1c770e
SHA1 14806c91c6a06fe4fcb02a8a823ae334457cbdb6
SHA512 1d189125d7bd76d44b169e0885d514f99472c36ca6ceaaa8948bd54861c524b65df00a1cd25d24f7376c0aa4405cc2c139b01d71f6c7633a9218de9760d7892c
MD5 SHA1 SHA512

.rdata

SHA256 05ee265c710ebb6c1280fccc249bbbacf24097d01bc4f9621c554726a40742f3
MD5 cca1ca3fbf99570f6de9b43ce767f368
SHA1 63635b36bd655a189c82d2a8b32e42aa99f985de
SHA512 c0e0c39a80eaa282a5effe0aa76441c7740129024a13dc198ec0d79744a94b82e3f064d63a9e551152c404b592effe3fa3a2cec4da12a9a912137585fbf4a832
SSDEEP 192:xBR1IorPNhxjQFOEopX7Bq343py7JRWVS7yWymPn:HRiaPblQFKnq343pwrWVaymPn
MD5 SHA1 SHA512 SSDEEP

.reloc

SHA256 532504992f773628485328052dc40dd6602e1b14b912e15a8ade35eede455b3e
MD5 b1f76fcbcb3ad609e320a3ba8f8870df
SHA1 62ba4a56db0a46eb9664d0bf192443a4ef969aab
SHA512 d168c9a5075416c87bf427b0094ce12df122af47eb824df4975c74b9bb9ad3f26862e8d22e067a6529a4f65a39b244f14319ee1af15420351681c344fb2f20a2
MD5 SHA1 SHA512

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 3520dee1023a7ac907f96d5717296b7c567f3da024a2fdc84c560fbe40ee8da3
MD5 e65be40f28c4d742368f8229ab981b91
SHA1 6447687cb06f2dacd11d8d15f847509bcf6efa44
SHA512 8b108e6b743d893a8e3db1bda045ea0b3db166ee75a4da92781068a08101a91f4f8173c96510e2a8ec517699eea51f5d232379d056c6538ac4b3064fbbe9948a
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 94321b3eede612869bb04f148baa10f204e18bd38c6e6510ccbc7e47d8d1042a
MD5 5cca1a878cba670155995be9404f4d30
SHA1 dc2c50e480d467aadee0b53c6f44754e5d6f7e1c
SHA512 3d3a539657dc47f34242a3d105b6803dedbca997df06c07b826b2270bc35aaa5025774771414a0b8fd984ab0f0a3dc8ea1987b9b6a8709418b2c4549e2789fa2
SSDEEP 3072:CIDQHq4ejBpuaHzxfvLJd8pdqZlnJ1CxbM/5VsMmgUDOOF7oQtYsncgGD69:Cfej26z5ld8sln4n7gUDVFFnq69
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2

SHA256 965b5ee54c5b563aa5cbf2030c4175ca59b29433e5181c3c4dcf1ba07d86161b
MD5 3de85d128fadbbd1ba497ac2899b61ea
SHA1 2b2ed74dc03241d6bba971786f82e3f96e4470b8
SHA512 ba2d0adadeb0d341e6fc7a5a9925e6a0026bcd39b2d78a073e94e9ba3bbffe63383f2470729b54cc2c2965c33e80f45688c41f96a84e83d412a598085697ba01
SSDEEP 384:tptzuvbBAzvG/MJRv/4PE5TIBkHbQZTWrGCT2FqzXKc+HKAq:UlAzvGejIOcZTwb2gzXKTG
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3

SHA256 d224eebadabda7701a2082c67320b77574800c9e01b3993be5c5de3849b98f11
MD5 48a74a31226ee6efddac5407d2d79eba
SHA1 c3cb7fbe053ab61d02ccaecb17093bef23a420e3
SHA512 5f3812d03a404c0911404a5e14ed6fc8029364e4a1ac8113ca2182b6028e45ca91ad50c494f5c2d81ede4325886a310e56397f8e6bcd4a11a402180ed5472ca5
SSDEEP 96:Axw41A0r2kcMV/iHEdSMuUhXxdNGVaoiPdKUXwrHq+NYF5/FvhXRnwasSa02sAMw:25t2u/WEd1uUhXZGVHetOHtNU/FvfnwR
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 608bdab8aff01df2e62d40e12fe556bfbee969ee29cd7a1bdfe37b8b14183de2
MD5 7a54284f79906d6c43f8114e51a7eab4
SHA1 9d1a4edefb7be9cdf021fb1e5fb1e9072f153e64
SHA512 0bb60456ea5decffae586d42e0e881ff523a392aa57712a0b4cf6ace0881ea08fa64eb2aa428fd8dafd5c9c94e3ef61e0bde57de1c87403c0b0e42d5dd71ea60
SSDEEP 192:rKmsxE7HMPAxlOWrnAPc22Xxy5LBLHEJ1GofIfg8:jYE7sPbWrnj22XxMLBLHEJ1GofI
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/5.ico

SHA256 187bec9df5ee108a333687a40683951506ab6d9c197864f5043c1e75a8b2fd23
MD5 85ad45ce1c43b6cd0af0318bdadcde52
SHA1 231baa7ea9f150e20dfd25c7da79915bc4094a0c
SHA512 a08f49294869b2bf2d4053aee9244e7c9564ccbfe94a04dbad2bc48ea6b9abbbaa795a2137796a43ce269a33120ed808447af057d26821b2c7328ba10758b02d
SSDEEP 48:u8P911nQKd/8KE3GX0jpLhZbXKjISgaYztxfElnF1F4oD2BIFgY7PTC:uM11TD+GShrorYZJEnF1RD2BQ7PO
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/6.ico

SHA256 afc04eb75a476feb0106a9988b8346e841adb6a934637286eb44fd879cf72aab
MD5 d5b00b1bb5be5a736b2bf3a62c4ac162
SHA1 1ba262a1b9e4c40f1f219ecd60bc8626253b7262
SHA512 22e0eff6a3a666f070c4dcc18d1b35af44607c622fbaffe204839ebdf70bac4d95919f07af9e49de012215cd759658671113746ce74bddf7b3129e73df037775
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67
MD5 8ac7761540a25f0e446671e95051ad9d
SHA1 dc2cbe444228a356272452dcda6a5f4f58bec4f7
SHA512 7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93
MD5 SHA1 SHA512

.rsrc/version.txt

SHA256 ece134b740912418e564135619b104b6f5e38d35edb7a964ef66016e0c5b44e9
MD5 53265db2695ef4266b5a286fc9cacbf0
SHA1 c89f65f93f17a336af82bfbcad87a4bfad6b7197
SHA512 ed0b5d7e505d7cb941f48211bae36ad5ee8440185887c19aa5b628127788da46911bb501d55c45a32cab84d79d3dc1cf4f5a06aacb5b5fba6ce8473852b5184b
MD5 SHA1 SHA512

.text

SHA256 97e6da0d74b3c02e39efeb02c6f019b353e9891a3ea453f2fa0ecca3c3e526e2
MD5 419d4e1be1ac35a5db9c47f553b27cea
SHA1 81b88fd425125756d41fada07ae1534b10c43c01
SHA512 17fea0a8c963ec9a6bdc562de750a4f8f527f2555f02d9df88b4e9ad41bdbd7fc37c0a303562f4834c195b485cc61284b6e19723bb376c23e08642884b70c121
SSDEEP 768:JsGPXyrvq/Sb6LbQ7eM468vxRu1rnd6ffMmKZS/5hK9G3/2o9+4gn:WGarUa6LowvuhdNYh2Gf9rg
MD5 SHA1 SHA512 SSDEEP

CERTIFICATE

SHA256 064bee5a1737e014438f7b40757424a73ff0cf1ccf2cb6ccf34cd4fc9466249a
MD5 adcb60fc6f242e49d019dfcdcca658cf
SHA1 2ce74c07b5dc61ccbc19d25d2bae6699d57af2c8
SHA512 6cfcc912cb6dec00a66dfde10b1f311d31a6a308d1edca44fb2e09eeca129b52683f7b0fdc3fc25aed7ada57df4212055f1b6faa092c6f338c12593cf018d24f
SSDEEP 384:lIivjK6ki2T/ubMQ3QNyb8E9VFzSJIV9sW5M:lzvjl26kEs+M
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 272846f6c2271d5b0e5d6602f33de1a84a44dcbb493f453e8da1a0266cdcbd12
MD5 9ed76aa91055699380020ca62a119d42
SHA1 257988b057f7292cc0e7f23cd292f6cbe71ba785
SHA512 678584b6a8221e2d2101e92f1a96ada53750f79fadbb2ce1b6448ec94ada44180ccf5304bcf794164c0e15d50873f1bedd622a695faf7d3cc5e83dbc273c2de7
MD5 SHA1 SHA512

[1]

SHA256 94689ed0b6c5bef434ae1d042ebb2ff625c17117f281d66d4fa7efc7ffc892bc
MD5 173b2a01fbdd66164fd903787b3ab748
SHA1 c79c8b773cd29330fd781ceb3ed030574645b554
SHA512 e6fc36321687d88c6802187d9a402221b6dd9d20220cca2a18cb3e3181e90673346cd0e2824a79969b8fd56e18d20987024273e76e7118fc21a82ca36751b9c5
SSDEEP 24576:bO1wZ8Baw0QD4Iv2kSen/rhSjJVC6h2Lg2np2uGVemv+Gl9z:bO1k8L0QcIv7nThSjeuKzDAemp
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

89b55665c76315777e1f2a9a5be784fd2590b917388f657c6f5c2caa055e87c2.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

.data

.rdata

.reloc

.rsrc/DIALOG/105

.rsrc/DIALOG/106

.rsrc/DIALOG/111

.rsrc/GROUP_ICON/103

.rsrc/ICON/1

.rsrc/ICON/2

.rsrc/ICON/3

.rsrc/ICON/4.ico

.rsrc/ICON/5.ico

.rsrc/ICON/6.ico

.rsrc/MANIFEST/1

.rsrc/version.txt

.text

CERTIFICATE

[0]

[1]