APD_612_T82IV[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
APD_612_T82IV.exe
Size 12.8MB
Sample260630-e5tpmaew5v
SHA256 364653ca51a093f8109ef172045ef6bb1b3c5c4374ea4fd5360be35a12ccec13
MD5 234675f0d8cdb87af59a4f39fe53b4d2
SHA1 3c099c97cea53e6fe7ed5e22291b7bcaa4b69c34
SHA512 3ab4f146e90c963954c502e7000ea5bf4e8cd4b9a74f11e97a0cf057c9c4b01a9cf3e675d58a4610594f8ee6a1ec8cce073b50f9cb1f79454da61bed1c5518d6
SSDEEP 393216:PeJ8zZlJAaGIwl4Xce3fTBqRUfKtjVc6zjX:PCalKaGzl4XL3fTBcjJzL
TLSH
T112D612D0D67398B2D663247202F09BB8CAFD5D62082545AD365CBDA4DAF0E90B74B1FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

APD_612_T82IV.exe

.exe 12.8MB

APD_612_T82IV.exe

IMPHASH c664d6376ea02c75a2c078690fe4b887
SHA256 364653ca51a093f8109ef172045ef6bb1b3c5c4374ea4fd5360be35a12ccec13
MD5 234675f0d8cdb87af59a4f39fe53b4d2
SHA1 3c099c97cea53e6fe7ed5e22291b7bcaa4b69c34
SHA512 3ab4f146e90c963954c502e7000ea5bf4e8cd4b9a74f11e97a0cf057c9c4b01a9cf3e675d58a4610594f8ee6a1ec8cce073b50f9cb1f79454da61bed1c5518d6
SSDEEP 393216:PeJ8zZlJAaGIwl4Xce3fTBqRUfKtjVc6zjX:PCalKaGzl4XL3fTBcjJzL
TLSH
T112D612D0D67398B2D663247202F09BB8CAFD5D62082545AD365CBDA4DAF0E90B74B1FC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

8f:27:9f:b8:18:76:38:52:88:70:22:9f:4b:7e:df:f3:64:fd:d9:50:6f:c2:8d:5d:d4:34:05:43:68:e0:aa:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=SEIKO EPSON CORPORATION,OU=セイコーエプソン,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

Chains

Dec 25, 2025

CN=SEIKO EPSON CORPORATION,OU=セイコーエプソン,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

07:b2:68:19:5e:e5:de:bb:94:22:7b:ee:3c:dd:45:c3:61:19:94:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=SEIKO EPSON CORPORATION,OU=セイコーエプソン,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

Chains

Dec 25, 2025

CN=SEIKO EPSON CORPORATION,OU=セイコーエプソン,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=SEIKO EPSON CORPORATION,OU=セイコーエプソン,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

Serial Number

07:29:e8:e7:ba:ec:16:23:5d:b7:f4:0a:70:81:6b:c2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 24, 2025 - Sep 14, 2026

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

29323

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PackageStub.pdb

comctl32

InitCommonControlsEx

kernel32

CloseHandle WaitForSingleObject Sleep GetExitCodeProcess CreateProcessA FreeResource LoadResource LockResource SizeofResource FindResourceA MoveFileExA GetTempPathA EnterCriticalSection LeaveCriticalSection CreateEventA GetCurrentThreadId GetTickCount FreeLibrary GetModuleFileNameA GetModuleHandleA GetProcAddress LoadLibraryExA lstrcmpiA MultiByteToWideChar WideCharToMultiByte IsDBCSLeadByte SetLastError SetEvent CreateThread LoadLibraryA FindNextFileA ReadFile SetEndOfFile SetFilePointerEx FlushFileBuffers CreateFileW GetStringTypeW SetStdHandle SetConsoleCtrlHandler SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW OutputDebugStringA HeapReAlloc HeapSize GetConsoleMode GetConsoleCP FindFirstFileA FindClose DeleteCriticalSection InitializeCriticalSectionEx GetLastError RaiseException DecodePointer SetFileAttributesA ReadConsoleW GetFileType GetCurrentThread WriteConsoleW GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess VirtualQuery VirtualProtect IsDebuggerPresent OutputDebugStringW EncodePointer HeapAlloc HeapFree GetProcessHeap InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList GetCurrentProcess FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetCommandLineA GetCommandLineW GetSystemInfo

user32

CreateDialogParamA UnregisterClassA SetForegroundWindow EnumThreadWindows GetMonitorInfoA MonitorFromWindow IsDialogMessageA LoadImageA GetWindow GetParent SetWindowLongA GetWindowLongA MapWindowPoints GetWindowRect DestroyWindow SetWindowTextA GetSystemMetrics GetDlgItem GetClientRect SetWindowPos ShowWindow PostQuitMessage PostMessageA SendMessageA PeekMessageA DispatchMessageA TranslateMessage GetMessageA LoadStringA CharNextA

advapi32

RegEnumKeyExA RegSetValueExA RegQueryInfoKeyW RegOpenKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA

shell32

SHFileOperationA SHCreateDirectoryExA

ole32

CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoTaskMemFree

oleaut32

SysFreeString VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

APD_612_T82IV.exe

comctl32

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic