ASLite2020[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ASLite2020.1.exe
Size 16.2MB
Sample260720-db8e9afy3x
SHA256 4db4005124ae65d15010199f1f52ae396f72fe7e2e46d5162dce039c0578cfe4
MD5 98b194a597ae2d0378aa7fd581db0863
SHA1 7444b7fc4a9b19fc36120ea594f46f926c4a0f89
SHA512 2b0027aabef5aaf6d7defcff2f3292413854f36489eb9f9da9ba353b398e4c64b8e7655e562f5fd61b18d144dd9965db053c89d27a2281279aa9eb579a09ce0b
SSDEEP 393216:bvjAP+5eznD4bZPPWnSJdlszno3Ra2LAfdG/sK6eDhiofHF7bhV:b7Z+nDOGSJdC2a2LA14f9lpV
TLSH
T11D0733421C3598A8C8D7D47C2C374B51EFDF81BDD986990A230E8CBDC9A7A91DB12B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ASLite2020.1.exe

File Explorer

ASLite2020.1.exe

.exe 16.2MB

ASLite2020.1.exe

IMPHASH a604c6ea79d5ea984febff3382a81f77
SHA256 4db4005124ae65d15010199f1f52ae396f72fe7e2e46d5162dce039c0578cfe4
MD5 98b194a597ae2d0378aa7fd581db0863
SHA1 7444b7fc4a9b19fc36120ea594f46f926c4a0f89
SHA512 2b0027aabef5aaf6d7defcff2f3292413854f36489eb9f9da9ba353b398e4c64b8e7655e562f5fd61b18d144dd9965db053c89d27a2281279aa9eb579a09ce0b
SSDEEP 393216:bvjAP+5eznD4bZPPWnSJdlszno3Ra2LAfdG/sK6eDhiofHF7bhV:b7Z+nDOGSJdC2a2LA14f9lpV
TLSH
T11D0733421C3598A8C8D7D47C2C374B51EFDF81BDD986990A230E8CBDC9A7A91DB12B5C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

36:dc:44:8e:85:e9:3d:b2:25:a1:b9:97:02:b2:52:37

Digest Algorithm

md5

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Neuratron Limited,O=Neuratron Limited,L=London,ST=London,C=GB

Chains

Jan 1, 0001

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Neuratron Limited,O=Neuratron Limited,L=London,ST=London,C=GB

Serial Number

66:f2:62:ec:fa:25:7f:3a:13:2c:05:76:28:3a:c7:64

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 18, 2017 - Jul 24, 2020

Subject

Serial Number

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Jul 16, 2036

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 10, 2013 - Dec 9, 2023

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ASLite2020.1.exe

PE Signature issue

kernel32

user32

generic