ArmouryCrateInstaller[.]exe

Resubmissions

09/07/2026, 22:49

260709-2rx68aav8p

09/07/2026, 22:48

260709-2rl4ysbx411

09/07/2026, 22:45

260709-2pgrfsav6r6

Sharing

Copy URL Twitter E-mail

General

Target
ArmouryCrateInstaller.exe
Size 4.0MB
Sample260709-2rl4ysbx41
SHA256 8139b87231d99cac36bfed7a4974c8086a9c32dd5fe15f4775f476f54f586b4c
MD5 beb653d2cd771788b34a1ab37f854ade
SHA1 aa95a26f03676084d70c491d91b70130253b9ecf
SHA512 8e281ebeebb295990e46580d78409d7677bfd38c6403a9602d9002d996d85a1a389d4685f85e898cb6438e42388c0826ae6843d4e4782919bd5bc5683477aabc
SSDEEP 49152:e/UsRFgMLuzT+0U2HNkX9sXBfB3jtwYph0Vk9xF+jQOviDb9RM2HjgVV1BCjBsWJ:uUsRFgMeFuXefBTqYH0VTebNHjgPWC+
TLSH
T1C816BF4173E509B5E9AB423988219919F7B2B8121771DBDF17C9C26A2F733908E39733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

ArmouryCrateInstaller.exe

.exe 4.0MB

ArmouryCrateInstaller.exe

IMPHASH c5232b436f1fad7ecda6849ede1e58e7
SHA256 8139b87231d99cac36bfed7a4974c8086a9c32dd5fe15f4775f476f54f586b4c
MD5 beb653d2cd771788b34a1ab37f854ade
SHA1 aa95a26f03676084d70c491d91b70130253b9ecf
SHA512 8e281ebeebb295990e46580d78409d7677bfd38c6403a9602d9002d996d85a1a389d4685f85e898cb6438e42388c0826ae6843d4e4782919bd5bc5683477aabc
SSDEEP 49152:e/UsRFgMLuzT+0U2HNkX9sXBfB3jtwYph0Vk9xF+jQOviDb9RM2HjgVV1BCjBsWJ:uUsRFgMeFuXefBTqYH0VTebNHjgPWC+
TLSH
T1C816BF4173E509B5E9AB423988219919F7B2B8121771DBDF17C9C26A2F733908E39733
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

fc:fb:08:22:15:5a:87:2d:fb:f2:1c:8f:50:dc:8e:49:9a:d5:0c:0f:ce:c7:3b:b3:75:9d:2c:8f:e5:a8:ed:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,OU=OP BG-MB BU-SYS SW RD Ctr,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Chains

Nov 28, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:e1:d6:69:bc:6c:5b:ca:5d:9c:d2:64:47:77:6b:07

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 24, 2024 - Sep 26, 2027

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

228852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Jenkins\workspace\AC_Installer\SetupROGLSLService\x64\Release\ArmouryCrateInstaller.pdb

kernel32

Process32FirstW WTSGetActiveConsoleSessionId CreateProcessW GetExitCodeProcess GetModuleHandleW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection CreateDirectoryW FindFirstFileExW FindFirstFileExA RemoveDirectoryW FindNextFileA GetFileAttributesA GetProcAddress SetDefaultDllDirectories GetStdHandle GetCurrentProcessId GetConsoleWindow LoadLibraryExA VirtualQuery GetSystemInfo WriteConsoleW HeapSize ReadConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage CreatePipe HeapReAlloc GetConsoleMode GetConsoleCP GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetFileType GetCommandLineA GetFileSizeEx GetCurrentProcess GetFileAttributesExW GetFileAttributesW GetModuleFileNameW FindResourceW LoadResource LockResource FreeResource Process32NextW SizeofResource GetCurrentThreadId ResetEvent DeleteFileW GetProcessHeap HeapAlloc HeapFree FlushFileBuffers WideCharToMultiByte GetWindowsDirectoryW DeleteFileA lstrcatW OutputDebugStringW FormatMessageW MultiByteToWideChar OutputDebugStringA lstrcpynW GetCommandLineW LocalFree Sleep CreateEventW WaitForSingleObject SetEvent WritePrivateProfileStringW lstrcpyW GetFileSize CloseHandle CreateFileA GetLastError CreateFileW FindClose MoveFileExW SetEnvironmentVariableW GetModuleHandleExW ExitProcess RaiseException RtlPcToFileHeader RtlUnwindEx CreateToolhelp32Snapshot TerminateProcess VirtualProtect LoadLibraryExW FreeLibrary GetThreadTimes InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetCPInfo DecodePointer EncodePointer GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetCurrentThread SwitchToThread WaitForSingleObjectEx DuplicateHandle WriteFile lstrlenW FindNextFileW FindFirstFileW ReadFile QueryPerformanceCounter GetFileInformationByHandle SetFilePointerEx

user32

ShowWindow

advapi32

RegCloseKey OpenServiceW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW RegQueryValueExW CreateProcessAsUserW GetAce EqualSid AllocateAndInitializeSid SetNamedSecurityInfoW GetNamedSecurityInfoW DeleteAce BuildTrusteeWithSidW CloseServiceHandle OpenSCManagerW FreeSid

shell32

ShellExecuteExW

oleaut32

VariantClear

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ArmouryCrateInstaller.exe

kernel32

user32

advapi32

shell32

oleaut32

generic