187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a

Sharing

Copy URL Twitter E-mail

General

Target
187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a
Size 4.9MB
Sample260706-mte14ady6x
SHA256 187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a
MD5 36c4aa821900431ea9012389c692d3bd
SHA1 57e31872695d1cc2e6a31ec8e7895b82b0ff9cad
SHA512 564107c8a9fa1ab58bef6757772472fc8e43145a977398bd7b8809e0a5cfda3d8599442faa039fc46764e2c5dbdaa30e53038b9ac378c8a90635f8130e5c55e3
SSDEEP 98304:Iaa1PbrUwZinEdCLw7TVZ4S+MXVnH4cv/ncfT/1toib/rvBVik:MRrUYF6SDvvcfjDrv7ik
TLSH
T11036CF22BB41C072E59F01B1947B6B7F897DAA30433084D797D42EA98D705C2BB3A797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a

File Explorer

187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a

.dll 4.9MB

187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a

IMPHASH 6b6f70743acddd63d75af4f5d18cd149
SHA256 187a93ef89d421e0a3eb2ca0e52f7c823348cdf2e51778f8e0ad306d66d6406a
MD5 36c4aa821900431ea9012389c692d3bd
SHA1 57e31872695d1cc2e6a31ec8e7895b82b0ff9cad
SHA512 564107c8a9fa1ab58bef6757772472fc8e43145a977398bd7b8809e0a5cfda3d8599442faa039fc46764e2c5dbdaa30e53038b9ac378c8a90635f8130e5c55e3
SSDEEP 98304:Iaa1PbrUwZinEdCLw7TVZ4S+MXVnH4cv/ncfT/1toib/rvBVik:MRrUYF6SDvvcfjDrv7ik
TLSH
T11036CF22BB41C072E59F01B1947B6B7F897DAA30433084D797D42EA98D705C2BB3A797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

71:1e:2c:3b:5b:0e:fb:05:f4:33:72:87:ba:b6:ae:24:33:71:d9:2d:3d:91:4f:54:09:9d:94:39:46:cc:33:35

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

Chains

Jan 14, 2026

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

50:71:de:c1:34:19:a0:a0:a6:bd:a3:fa:69:19:86:61:64:38:84:97

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

Chains

Jan 14, 2026

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=GRYPH FRONTIER PTE. LTD.,O=GRYPH FRONTIER PTE. LTD.,L=Singapore,C=SG

Serial Number

04:fe:a6:c5:f8:4c:71:38:ce:5f:53:59:36:55:5a:94

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2025 - Aug 1, 2028

Minor OS version

Major OS version

Entry point

2520760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\work\launcher-next-lastest\publish\Install\Widget\Bin\Release\pdb\Widget.pdb

advapi32

RegCloseKey RegEnumValueW RegOpenKeyExW RegDeleteKeyValueW RegSetKeyValueW RegDeleteTreeW RegGetValueW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegisterEventSourceW ReportEventW CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptCreateHash CryptDestroyHash CryptSignHashW CryptEnumProvidersW RegQueryValueExW DeregisterEventSource

gdi32

ExcludeClipRect Ellipse CreateRectRgnIndirect CreateRectRgn CreatePatternBrush CreatePen ExtSelectClipRgn CombineRgn Arc SetViewportOrgEx CreateCompatibleBitmap StretchBlt GetObjectW SetBkMode Rectangle GetStockObject GetClipBox GetRgnBox CreateFontIndirectW SetGraphicsMode SelectObject DeleteDC CreateCompatibleDC CreateBitmap EnumFontsW BitBlt DeleteObject CreateRoundRectRgn GetClipRgn GetTextColor GetTextExtentPoint32W IntersectClipRect OffsetRgn Pie PtInRegion RectInRegion SetRectRgn SetROP2 SetTextColor GetWorldTransform SetWorldTransform CreateDIBSection ExtCreatePen Polyline RestoreDC RoundRect CreateSolidBrush GetCurrentObject GetViewportOrgEx GetDeviceCaps SaveDC CreateEllipticRgnIndirect

user32

SetCursor SetRect EqualRect PtInRect ClientToScreen CharNextW GetIconInfo GetFocus GetKeyState EnableWindow IsWindowEnabled SetActiveWindow GetDesktopWindow GetMessageW TranslateMessage DispatchMessageW PeekMessageW EnableMenuItem GetSysColor IsWindowVisible DrawTextW SystemParametersInfoA CharLowerBuffW MapVirtualKeyA UpdateLayeredWindow IsMenu CreatePopupMenu DestroyMenu GetMenuItemCount AppendMenuW TrackPopupMenu UpdateWindow SetMenuInfo GetMenuItemInfoW SetMenuContextHelpId MsgWaitForMultipleObjects GetForegroundWindow DestroyIcon InvertRect DrawIconEx KillTimer GetClassNameW IsRectEmpty UnionRect IntersectRect BeginPaint DestroyWindow DestroyCursor LoadCursorW GetSystemMetrics GetUserObjectInformationW GetProcessWindowStation GetActiveWindow MessageBoxW OffsetRect MessageBoxA GetWindowLongW wsprintfW SetWindowPos IsIconic GetDC ReleaseDC SetWindowTextW GetWindowRect MonitorFromRect FlashWindowEx BringWindowToTop SwitchToThisWindow SetForegroundWindow ScreenToClient SetCaretPos HideCaret GetCaretBlinkTime CreateCaret GetCursorPos SetTimer ReleaseCapture SendMessageW SetCapture GetCapture PostMessageW IsWindow ShowWindow SetFocus IsZoomed CallWindowProcW SetLayeredWindowAttributes AnimateWindow PostQuitMessage TrackMouseEvent GetMonitorInfoW InvalidateRect EndPaint FillRect MonitorFromWindow GetWindow GetParent SetWindowLongW MapWindowPoints GetClientRect GetDlgItem CreateWindowExW RegisterClassExW UnregisterClassW LoadBitmapW DefWindowProcW InflateRect CopyRect LoadImageW GetMenuInfo CreateIconFromResource

ole32

CoCreateGuid CoUninitialize CoTaskMemFree CoCreateInstance OleUninitialize OleInitialize CoInitialize IIDFromString CreateStreamOnHGlobal CreateBindCtx CLSIDFromProgID CLSIDFromString OleLockRunning

kernel32

K32EnumProcessModules K32GetModuleFileNameExW GlobalAlloc GlobalFree lstrcpynW lstrcpyW SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW GetStdHandle GetEnvironmentVariableW GetFileType SwitchToFiber DeleteFiber CreateFiber QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FormatMessageW ConvertFiberToThread ConvertThreadToFiber LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW GetDynamicTimeZoneInformation WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetEnvironmentVariableA GlobalMemoryStatusEx K32GetModuleBaseNameW K32GetProcessMemoryInfo GetFullPathNameW FreeResource MulDiv HeapCreate HeapDestroy InitializeCriticalSection FlushInstructionCache GetVersionExW GetLocalTime GetVersionExA Process32NextW GetFileSizeEx SetEndOfFile SetFilePointer GetTempPathW GetSystemInfo CreateFileMappingW MapViewOfFile FlushViewOfFile UnmapViewOfFile MoveFileExW LockFileEx UnlockFileEx LockFile GetFullPathNameA HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA CreateFileA DeleteFileA HeapCompact UnlockFile SystemTimeToFileTime GetSystemTime lstrlenA QueryFullProcessImageNameW VerifyVersionInfoW VerSetConditionMask SleepEx WaitForMultipleObjects CompareFileTime MoveFileExA GetSystemDirectoryA OutputDebugStringW WriteConsoleW HeapSize SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation SetStdHandle GetConsoleOutputCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW Process32FirstW MoveFileW CreateToolhelp32Snapshot FindResourceW SizeofResource GetModuleHandleA LockResource CompareStringW GetTimeFormatW GetDateFormatW HeapReAlloc FreeLibraryAndExitThread ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetDriveTypeW SetConsoleCtrlHandler LoadLibraryExW InterlockedFlushSList RtlUnwind InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter CreateEventW ResetEvent SetEvent GlobalLock GlobalUnlock GetCPInfo CompareStringEx LoadResource GetModuleHandleW GetModuleFileNameW GetTickCount64 OpenProcess GetExitCodeProcess TerminateProcess GetCurrentProcess RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateDirectoryW MultiByteToWideChar GetProcessHeap HeapFree HeapAlloc WriteFile SetFilePointerEx ReadFile LCMapStringEx DecodePointer EncodePointer GetFileSize FlushFileBuffers CreateFileW ExitProcess WideCharToMultiByte CopyFileW FormatMessageA LocalFree GetProcAddress GetTickCount CreateThread Sleep WaitForSingleObject OutputDebugStringA GetUserDefaultUILanguage CreateProcessW GetCommandLineW LoadLibraryW FreeLibrary GetCurrentThreadId CreateMutexW GetLastError CloseHandle SetCurrentDirectoryW RaiseException GetFileInformationByHandleEx AreFileApisANSI SetFileInformationByHandle GetFileInformationByHandle GetFileAttributesExW FindFirstFileExW GetCurrentDirectoryW SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable GetExitCodeThread WaitForSingleObjectEx QueryPerformanceFrequency TryEnterCriticalSection InitializeCriticalSectionEx AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock GetStringTypeW GetDiskFreeSpaceW

shell32

SHCreateShellItem ShellExecuteW ord155 ord190 SHChangeNotify SHGetKnownFolderPath CommandLineToArgvW

oleaut32

SysFreeString SysAllocString

shlwapi

PathFindFileNameW StrToIntExW

version

GetFileVersionInfoSizeW VerQueryValueW VerQueryValueA GetFileVersionInfoW

bcrypt

BCryptGenRandom

setupapi

CM_Get_Child CM_Get_Device_IDW CM_Get_Device_ID_List_SizeW CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status CM_Get_Sibling CM_Locate_DevNodeW CM_Open_DevNode_Key SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW CM_Get_Device_ID_ListW SetupDiGetDevicePropertyW

iphlpapi

GetIfEntry GetIpAddrTable

imm32

ImmGetContext ImmReleaseContext ImmAssociateContext

gdiplus

GdipBitmapLockBits GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageRectI GdipGraphicsClear GdipDeleteGraphics GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipSaveImageToFile GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdipBitmapUnlockBits

msimg32

AlphaBlend GradientFill

dxgi

CreateDXGIFactory

crypt32

CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenSystemStoreA

ws2_32

htonl select __WSAFDIsSet htons ioctlsocket getsockname getsockopt ntohs WSAStartup WSAIoctl WSAWaitForMultipleEvents getpeername gethostname recvfrom sendto setsockopt WSACleanup WSAGetLastError getaddrinfo freeaddrinfo recv send WSASetLastError bind closesocket connect listen accept socket WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent

normaliz

IdnToAscii

wldap32

ord79 ord35 ord33 ord32 ord27 ord26 ord22 ord41 ord50 ord45 ord60 ord211 ord46 ord217 ord200 ord301 ord30 ord143

generic

count=30, id=259, version=27412,

count=1, id=263, version=27412,

count=219, id=261, version=27412,

count=7, id=253, version=28518,

count=19, id=260, version=30034,

count=28, id=259, version=30034,

count=88, id=261, version=30034,

count=38, id=260, version=27412,

count=1, id=262, version=27412,

count=34, id=261, version=30159,

count=6, id=261, version=30157,

count=21, productName=Unmarked objects (old),

count=702, id=260, version=30157,

count=41, id=257, version=27412,

count=596, id=1, productName=Unmarked objects,

count=26, id=260, version=30154,

count=123, id=261, version=30154,

count=1, id=256, version=30154,

count=1, id=255, version=30154,

count=1, id=151,

count=1, id=258, version=30154,