SuperDisplay_Installer_v1[.]1[.]10[.]exe

General

Target
SuperDisplay_Installer_v1.1.10.exe
Size 28.1MB
Sample260706-tem7gsds3p
SHA256 bd7b2d30b633986f5eabfd4e1bb561e7cf7e79ee7be5db03bee270c79298d252
MD5 9abf12739a67e7ae23b715d85cede12a
SHA1 aa2b0a80c2fab11f661c96a6dce5aad18973a995
SHA512 82503b8ff415a154fdd04b74b82447e7d999b987dabf4753d1564749788fe51667e91e128ace5a3c6de626adc88966c7637537fc875a13515a0a6fb7ebf5d734
SSDEEP 786432:Q4hb4hZhBzkqU9odEQhTMiupttD7yBG/PcXU9g5h:zO/h3h+xjpttD7y0/0XUm5h
TLSH
T1A6571231778AC53BD57205B06A2CD7AF1469BF640F7044DBA3C86D6E99B48C38632E27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SuperDisplay_Installer_v1.1.10.exe

.exe 28.1MB

SuperDisplay_Installer_v1.1.10.exe

IMPHASH 2565cbd2a560c6b3554de2985322d883
SHA256 bd7b2d30b633986f5eabfd4e1bb561e7cf7e79ee7be5db03bee270c79298d252
MD5 9abf12739a67e7ae23b715d85cede12a
SHA1 aa2b0a80c2fab11f661c96a6dce5aad18973a995
SHA512 82503b8ff415a154fdd04b74b82447e7d999b987dabf4753d1564749788fe51667e91e128ace5a3c6de626adc88966c7637537fc875a13515a0a6fb7ebf5d734
SSDEEP 786432:Q4hb4hZhBzkqU9odEQhTMiupttD7yBG/PcXU9g5h:zO/h3h+xjpttD7y0/0XUm5h
TLSH
T1A6571231778AC53BD57205B06A2CD7AF1469BF640F7044DBA3C86D6E99B48C38632E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

c3:bc:ee:77:aa:3c:ea:e0:82:c6:bc:2b:fe:c7:1f:ea:c4:73:0c:60:cd:b2:20:90:52:42:7e:74:7c:f0:a3:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3089087-6,CN=Software by KeloCube,O=Software by KeloCube,POSTALCODE=21500,STREET=KAARINA+STREET=Ilokalliontie 5,L=PIIKKIÖ,ST=Varsinais-Suomi,C=FI,2.5.4.18=#13053231353030,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649

Chains

Sep 19, 2020

SERIALNUMBER=3089087-6,CN=Software by KeloCube,O=Software by KeloCube,POSTALCODE=21500,STREET=KAARINA+STREET=Ilokalliontie 5,L=PIIKKIÖ,ST=Varsinais-Suomi,C=FI,2.5.4.18=#13053231353030,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=3089087-6,CN=Software by KeloCube,O=Software by KeloCube,POSTALCODE=21500,STREET=KAARINA+STREET=Ilokalliontie 5,L=PIIKKIÖ,ST=Varsinais-Suomi,C=FI,2.5.4.18=#13053231353030,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649

Serial Number

e6:43:3c:a2:35:f0:07:1e:bd:c9:d4:d6:91:d0:19:cc

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2020

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

1181132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\JobRelease\win\Release\stubs\x86\ExternalUi.pdb

kernel32

CreateFileW CloseHandle WriteFile DeleteFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap RemoveDirectoryW GetTempPathW GetTempFileNameW CreateDirectoryW MoveFileW GetLastError SizeofResource LockResource LoadResource FindResourceW FindResourceExW EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentThreadId RaiseException SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW CreateEventW SetEvent InitializeCriticalSection lstrcpynW WaitForSingleObject CreateThread GetProcAddress LoadLibraryExW DecodePointer Sleep GetDiskFreeSpaceExW GetExitCodeThread GetCurrentProcessId FreeLibrary GetSystemDirectoryW lstrlenW VerifyVersionInfoW VerSetConditionMask lstrcmpiW GetModuleHandleW LoadLibraryW GetDriveTypeW CompareStringW FindFirstFileW FindNextFileW GetLogicalDriveStringsW GetFileSize GetFileAttributesW GetShortPathNameW SetFileAttributesW GetFileTime CopyFileW ReadFile SetFilePointer FindClose MultiByteToWideChar WideCharToMultiByte GetCurrentProcess GetSystemInfo WaitForMultipleObjects ReadConsoleW VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW SetUnhandledExceptionFilter SystemTimeToFileTime FileTimeToSystemTime GetEnvironmentVariableW GetEnvironmentStringsW FormatMessageW LocalFree LoadLibraryA GetModuleFileNameA GetFullPathNameW GetCurrentThread FlushFileBuffers SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo OutputDebugStringW CreateProcessW GetExitCodeProcess GetTickCount GetCommandLineW SetCurrentDirectoryW SetEndOfFile EnumResourceLanguagesW GetLocaleInfoW GetSystemDefaultLangID GetUserDefaultLangID GetWindowsDirectoryW GetSystemTime CreateToolhelp32Snapshot Process32FirstW Process32NextW ResetEvent GlobalFree GetPrivateProfileStringW GetPrivateProfileSectionNamesW WritePrivateProfileStringW GetLocalTime CreateNamedPipeW ConnectNamedPipe TerminateThread LocalAlloc CompareFileTime CopyFileExW OpenEventW PeekNamedPipe IsDebuggerPresent EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree QueryPerformanceCounter QueryPerformanceFrequency SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetCPInfo LCMapStringW WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind ExitProcess GetModuleHandleExW GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP GetFileSizeEx SetFilePointerEx FindFirstFileExW GetCommandLineA FreeEnvironmentStringsW SetStdHandle WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

SuperDisplay_Installer_v1.1.10.exe

kernel32

generic