DangerousMidlands[.]exe

DangerousMidlands.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 a2338d0fb90c8e190571b32d5e5fce6b943b9fd10d8900c82d39ee1335183e0e
MD5 e4ae7d2d997ad9cdb1e4c138e4dd10df
SHA1 fc1755d4bf9e0ae7e6ae1cfd4f2100388523ee8c
SHA512 43ef9c12da2a160b9c961f8d2282786357acc21ad42d2e4afa24f6d0b4b3830b60af3cf2c2e71a79a93ee967fded7b6a21db3a3a6e5db3ae2abd308bb0799aa1
SSDEEP 24576:Kd0HzzFvwGLyNRCqplgMxKJDFd+CTqO+I:e09wGLyNRChMxaF4CTH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

4e:5a:23:1e:98:41:ce:4d:dc:d4:90:4f:d6:01:78:47:76:19:67:37:8f:eb:f7:86:52:af:7a:0d:5e:3e:a3:68

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Dec 6, 2024

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0d:1a:34:0f:78:d7:d0:00:e0:89:fd:ba:ad:65:22:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 3, 2023 - Nov 4, 2025

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

14511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 c56f910b6057a45fbe5062083358ecddf9e603cdb2f2152a95fe80bdc22a4461
MD5 77f0839f8ebea31040e462523e1c770e
SHA1 14806c91c6a06fe4fcb02a8a823ae334457cbdb6
SHA512 1d189125d7bd76d44b169e0885d514f99472c36ca6ceaaa8948bd54861c524b65df00a1cd25d24f7376c0aa4405cc2c139b01d71f6c7633a9218de9760d7892c
MD5 SHA1 SHA512

.rdata

SHA256 05ee265c710ebb6c1280fccc249bbbacf24097d01bc4f9621c554726a40742f3
MD5 cca1ca3fbf99570f6de9b43ce767f368
SHA1 63635b36bd655a189c82d2a8b32e42aa99f985de
SHA512 c0e0c39a80eaa282a5effe0aa76441c7740129024a13dc198ec0d79744a94b82e3f064d63a9e551152c404b592effe3fa3a2cec4da12a9a912137585fbf4a832
SSDEEP 192:xBR1IorPNhxjQFOEopX7Bq343py7JRWVS7yWymPn:HRiaPblQFKnq343pwrWVaymPn
MD5 SHA1 SHA512 SSDEEP

.reloc

SHA256 f435281079125f169c985db87589922dea94bbab1581b2f6b8e71cfd950f8374
MD5 c9953916bea715d4da4ed72b6d31b9e2
SHA1 509730d5fcfe21975a341a3eec7e052b6fb60a76
SHA512 3e5ad688a59717e505d84fe035dccf19d06286c0d9d51b05c434c2133458f5a55fbeee270e2c21338b9b62dc472f9d7c6175cf51f2840faf9d75851c857c41f9
MD5 SHA1 SHA512

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 3b125db10fd4cb87cad1fa951ed03068666b716610a5371e90f8a810ef32bc83
MD5 68474deec53f83d8a48b2373f6f86c7e
SHA1 9ed8877367723f7512b859b4d8c67559c0cdc7fb
SHA512 b07ac5e8f23371f1a813cebfca1924a0ee8ed20df81782ad82c5f4f0b10296fdd9adb359aad7b197df894f1ffb721c950bb6bfc61ffd246de2aed21f0c6214ac
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 4cbe198ffad25f9362eb8217300120e65fb7a1ecb498f76d41a00a3bc0cf72a7
MD5 3c6d0cd1ff883028b68ad7348ff5e5ea
SHA1 b54f2c0a885ba5d2c3cd277c9e266156d73bff8f
SHA512 620bf6993ba1c4cf693fb86967ffa6a1c3a4944bb1b584f7a4a92ad3157def9b8066d6fdfee39d9327455251c3965d6748fa8d72137b2b3b5e3f64962b97c768
SSDEEP 3072:WbVVBRp7iXNYy20eQoBqXvQxcJ66LyxzXi5/4MHFC0u9EPxR2QZit/D8vvgZ:WBRpWCylebAXvQ6JvCGvomPx9MD8k
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2

SHA256 9fced762453a3d247b5a550dad5e54b6b13f44c3fd34aa68bb83807a857fcce4
MD5 141ffdd0c87de14f7694ad8482765fd2
SHA1 33ac28d4ea036ec3a52e9f9d9fa959ae1815c785
SHA512 1e51921eb997ba4a29385260650685e5ff9dfac4b35a47a6ec802ab70e3f1345c6cfb39c95c46f9b97418664be9ded52682aca7355a60d42b162d8b8a8543ad9
SSDEEP 384:oOlB4ENJRUWTNZMxcmnosMxkPucK/yGXOICsJtDXJ:oiJRtN3tdpr/yc1J7
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3

SHA256 ad8bca287b340ec0aa469e73c5bd221fab73264a544616dc236fda8faeac33b4
MD5 b36b1a7f31cdb99f40b75eabe4640c48
SHA1 83c283b901e67ada72217bf9bc25c44f1223367b
SHA512 f1f450b14ea8d4eccbe35d21ebfcd1cc68c66a9c5aa5945ece0fb9333e70c780cf560083c820c04be752568c6ade94f8f99e85299b4b0e5ec0c6c3f17622840a
SSDEEP 96:Sp0UzZBJLEr8VZM7MjmdoPu1Rovg1k7sI2DLo63UHbrOUqf2V/aEb15Dg7CO:Sp0SB5VZM76C1er7sBDLQbiVf2V/v5DY
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 333cc856f97718de3b95a41f478e184ae02159f2ac694f0dab52277cc58bfd17
MD5 737d21a4757c4587b7204bbe86e504ee
SHA1 54995cc58f2f1bee7f0eaea95d9f130aa5e5f374
SHA512 544ee93d633b2fee8a957a2b3602f203ef8b89ed307bb87956e542f5d49f8cb9e57d8d42e51215c6e2ff1f1335290477ccc621e4d07aa8a32116ef277cd6d5e3
SSDEEP 192:BHzSOwvbVvvvpXa9wVnCeI6/jlM3ZkRfA:5zSOwv5vvvaInCe5jlk
MD5 SHA1 SHA512 SSDEEP

.rsrc/MANIFEST/1

SHA256 46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67
MD5 8ac7761540a25f0e446671e95051ad9d
SHA1 dc2cbe444228a356272452dcda6a5f4f58bec4f7
SHA512 7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93
MD5 SHA1 SHA512

.text

SHA256 97e6da0d74b3c02e39efeb02c6f019b353e9891a3ea453f2fa0ecca3c3e526e2
MD5 419d4e1be1ac35a5db9c47f553b27cea
SHA1 81b88fd425125756d41fada07ae1534b10c43c01
SHA512 17fea0a8c963ec9a6bdc562de750a4f8f527f2555f02d9df88b4e9ad41bdbd7fc37c0a303562f4834c195b485cc61284b6e19723bb376c23e08642884b70c121
SSDEEP 768:JsGPXyrvq/Sb6LbQ7eM468vxRu1rnd6ffMmKZS/5hK9G3/2o9+4gn:WGarUa6LowvuhdNYh2Gf9rg
MD5 SHA1 SHA512 SSDEEP

CERTIFICATE

SHA256 53df6abe29819e2693b8d15cc1e8a101f7b83ba72f1c8485915efffd615a0090
MD5 320588edb173d867993f24c470253543
SHA1 94eec004b111573141dcdac181158c779160616a
SHA512 3ba9289c582473747e37e24d44eb86f5774f316a56613a44fcb8fcc750742704317b83ed08bb2bddf58e83dd456a3b28d01780a3a631cda3f2ec1ffe7f2828b0
SSDEEP 192:kIYiYF8DVsYw45y1QS35IVnEy2sE9jBF0NycdVGxbbP/:kIYigYwf1QSJIVE8E9VF0NycdoV
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 65af7b430d580514205c0f6a8ee051a2026f25cfe1a72ecc063f3d9eea96b36f
MD5 059d69bfce8a5a02a44dc984e6b7c4cc
SHA1 ea2ecdd9709df9eb110ca06fe44cd24b55e4fb97
SHA512 a27a6a312243ee3aa93644f5fb6956ce8e071e5e99f6e00ad39b0b2f2f627bf83974515a9622068d4ddb978a7c9f628d1ef76aaa7e2bac132d48776397c847c2
MD5 SHA1 SHA512

[1]

SHA256 382db01b77311a28cebffaf4c5b345aefc501bec1e39465666931b1f68bc2a17
MD5 91cb1f5cf0b287609c81dd54d116771f
SHA1 58046cd634fb358b7645fe686a146af9fe8612d7
SHA512 84b945b7e3b734b8449833f257da2ee6ec9027cd180923cb88cd82254eeea72b446e3a668629e8df28bb50acea6aad21f08aac880fe67de852bf9bfbd5756748
SSDEEP 12288:WvCZZH5Q8YRkNRCFgC3YvRFzkQ2UxgMFdrf1HqI0C6v/nE+dV6xyRT9gO+9:WvwGLyNRCqplgMxKJDFd+CTqO+9
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

DangerousMidlands.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

.data

.rdata

.reloc

.rsrc/DIALOG/105

.rsrc/DIALOG/106

.rsrc/DIALOG/111

.rsrc/GROUP_ICON/103

.rsrc/ICON/1

.rsrc/ICON/2

.rsrc/ICON/3

.rsrc/ICON/4.ico

.rsrc/MANIFEST/1

.text

CERTIFICATE

[0]

[1]