stampmanage_2023[.]ts3

Sharing

Copy URL Twitter E-mail

General

Target
stampmanage_2023.ts3
Size 1.2MB
Sample260722-wywn3seq3t
SHA256 c461a62288e5271f3a1a78ed8719494f2b9d533be63878a7fe52df123d327a9d
MD5 bc836148170d298c3e6ce21f6bab02c2
SHA1 6566a991577b22ff5ecf439b868a25ab034af52b
SHA512 9d0891dbabc8bf439e31ea0277bae26811ba474d24d642fd355d0bc2969595890724f004d616ea980d50f1f21bd356d0168765f2ed1ba4282a84f5bb82f2dd98
SSDEEP 24576:Hu8JzEgZUknnNzB43bz/3FDhMVGYkUmdNJhmtnjyFwTACQnUsnk+:O8JqFVMEtHahwb
TLSH
T1F3459E223892C036CA71C471CE6A97F5D7F1E9788E73498B6BC6C93C4B35C459226A3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
stampmanage_2023.ts3

File Explorer

stampmanage_2023.ts3

.exe 1.2MB

stampmanage_2023.ts3

IMPHASH ee1e1ee2b42e583d685eeeeb02917b45
SHA256 c461a62288e5271f3a1a78ed8719494f2b9d533be63878a7fe52df123d327a9d
MD5 bc836148170d298c3e6ce21f6bab02c2
SHA1 6566a991577b22ff5ecf439b868a25ab034af52b
SHA512 9d0891dbabc8bf439e31ea0277bae26811ba474d24d642fd355d0bc2969595890724f004d616ea980d50f1f21bd356d0168765f2ed1ba4282a84f5bb82f2dd98
SSDEEP 24576:Hu8JzEgZUknnNzB43bz/3FDhMVGYkUmdNJhmtnjyFwTACQnUsnk+:O8JqFVMEtHahwb
TLSH
T1F3459E223892C036CA71C471CE6A97F5D7F1E9788E73498B6BC6C93C4B35C459226A3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

a4:65:a3:69:fa:f2:16:fb:38:a8:13:85:80:be:62:cc:f4:7d:97:ab

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Liberty Street Software,O=Liberty Street Software,ST=Ontario,C=CA

Chains

Aug 29, 2023

CN=Liberty Street Software,O=Liberty Street Software,ST=Ontario,C=CA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=Liberty Street Software,O=Liberty Street Software,ST=Ontario,C=CA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Liberty Street Software,O=Liberty Street Software,ST=Ontario,C=CA

Serial Number

e6:da:f4:13:6a:8b:31:fc:01:df:e8:02:ea:b6:26:eb

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 16, 2023 - Mar 15, 2025

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 6, 2022 - May 8, 2033

Minor OS version

Major OS version

Entry point

729254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

mciSendCommandA timeGetTime

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

HeapCreate VirtualFree VirtualAlloc GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle IsValidLocale IsValidCodePage EnumSystemLocalesA GetUserDefaultLCID CompareStringA CompareStringW IsBadCodePtr SetEnvironmentVariableA GetLocaleInfoW GlobalAlloc SetLastError GetLastError GetLocaleInfoA HeapDestroy GetVersionExA FreeLibrary GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings GetProcAddress LoadLibraryA GetModuleHandleA CloseHandle OpenProcess GetModuleFileNameA GetProcessVersion ExpandEnvironmentStringsA GetComputerNameA GetCurrentProcess GetEnvironmentVariableA SetUnhandledExceptionFilter GetFileType SetStdHandle HeapSize GetACP GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA GetLocalTime GetTimeZoneInformation ExitProcess RtlUnwind GetOEMCP GetCPInfo GlobalFlags LocalReAlloc IsBadWritePtr WaitForSingleObject GetFileTime FindResourceA LoadResource LockResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom WideCharToMultiByte InterlockedDecrement GetThreadLocale MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers DuplicateHandle GetFileSize DosDateTimeToFileTime LocalFileTimeToFileTime IsBadStringPtrA FileTimeToDosDateTime lstrcmpiA LocalAlloc LocalLock LocalUnlock GlobalReAlloc IsDBCSLeadByte lstrcatA TlsGetValue GetCurrentThread GetWindowsDirectoryA GetSystemDirectoryA GetTempPathA GetVolumeInformationA GetDriveTypeA GetDiskFreeSpaceA GlobalMemoryStatus lstrlenA TlsFree TlsSetValue TlsAlloc GlobalSize WriteFile IsBadHugeReadPtr lstrcmpA RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection IsBadReadPtr GlobalLock GlobalHandle GlobalUnlock GetVersion GetProcessHeap HeapFree HeapAlloc HeapReAlloc GetSystemDefaultLangID Sleep DeviceIoControl SetErrorMode GetLogicalDriveStringsA GetTickCount TerminateProcess FormatMessageA LocalFree GetShortPathNameA MoveFileExA CopyFileA MultiByteToWideChar GetPrivateProfileSectionA GetPrivateProfileStringA GetPrivateProfileSectionNamesA WritePrivateProfileStringA MulDiv GetTempFileNameA CreateProcessA GetExitCodeProcess GetCurrentDirectoryA SetCurrentDirectoryA CreateDirectoryA RemoveDirectoryA SetFileAttributesA DeleteFileA SetFileTime GetSystemTime SystemTimeToFileTime InterlockedIncrement FindNextFileA CreateFileA SetFilePointer ReadFile GetFullPathNameA lstrcpynA GetFileAttributesA lstrcpyA FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToSystemTime LoadLibraryExA GlobalFree

user32

ShowOwnedPopups BringWindowToTop UnpackDDElParam ReuseDDElParam SetMenu ReleaseCapture TranslateAcceleratorA LoadAcceleratorsA SetRectEmpty GetMessageA ValidateRect CreateDialogIndirectParamA EndPaint BeginPaint LoadStringA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState UnregisterClassA CheckMenuItem EnableMenuItem MoveWindow IsDialogMessageA IsDlgButtonChecked CheckRadioButton SendDlgItemMessageA MapWindowPoints SetFocus AdjustWindowRectEx DeferWindowPos BeginDeferWindowPos EndDeferWindowPos GetScrollInfo GetTopWindow IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetDlgItem GetWindowTextLengthA GetDlgCtrlID CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessagePos GetLastActivePopup SetWindowContextHelpId GetWindowPlacement WaitForInputIdle SetDlgItemTextA SetWindowTextA EndDialog DialogBoxParamA OemToCharA CharNextA CharPrevA CharUpperBuffA UpdateWindow SetWindowLongA IsWindowEnabled IsIconic GetSystemMenu RemoveMenu ModifyMenuA ShowWindow DestroyWindow PtInRect DrawFrameControl EqualRect GetKeyState GrayStringA DrawTextA TabbedTextOutA ScreenToClient ExitWindowsEx IsWindowVisible LoadCursorA SetWindowPos GetForegroundWindow GetWindow GetWindowTextA GetWindowThreadProcessId EnumWindows RedrawWindow SetActiveWindow DrawAnimatedRects SetParent FindWindowA EnumChildWindows GetClassNameA SetForegroundWindow GetMenuItemID GetCursorPos TrackPopupMenu KillTimer SetTimer SetMenuDefaultItem GetSystemMetrics SendMessageTimeoutA MessageBoxA SystemParametersInfoA MsgWaitForMultipleObjects wsprintfA TranslateMessage DispatchMessageA LoadIconA PeekMessageA PostQuitMessage CharUpperA FrameRect LoadMenuA LoadImageA GetDC MapDialogRect GetSysColorBrush CopyAcceleratorTableA SetRect GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA RegisterWindowMessageA GetSysColor FillRect DrawStateA OffsetRect GetClientRect CopyRect InflateRect DrawFocusRect GetWindowRect GetSubMenu TrackPopupMenuEx PostMessageA ClientToScreen WindowFromPoint GetActiveWindow InvalidateRect SetCursor GetWindowLongA DestroyIcon DestroyCursor DestroyMenu GetDesktopWindow GetWindowDC ReleaseDC EnableWindow GetFocus GetAsyncKeyState MessageBeep GetParent GetNextDlgTabItem SendMessageA IsWindow GetMessageTime SetMenuItemBitmaps

gdi32

SetBkMode GetClipBox SaveDC RestoreDC SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx MoveToEx LineTo ExtSelectClipRgn GetTextExtentPoint32A GetTextColor CreatePalette GetPaletteEntries SetDIBColorTable SelectPalette RealizePalette SetDIBitsToDevice CreateDIBSection CreatePen GetBkMode Escape ExtTextOutA TextOutA RectVisible PtVisible CreateSolidBrush PatBlt CreateFontIndirectA LPtoDP GetMapMode GetWindowExtEx GetViewportExtEx DPtoLP GetBkColor RoundRect Rectangle CreateRoundRectRgn EnumFontFamiliesExA CreateScalableFontResourceA RemoveFontResourceA GetTextMetricsA DeleteDC GetDeviceCaps DeleteObject GetStockObject CreateCompatibleBitmap CreateCompatibleDC BitBlt SetTextColor SetBkColor SelectObject CreateBitmap GetObjectA AddFontResourceA CreateFontA

comdlg32

GetOpenFileNameA GetFileTitleA GetSaveFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegQueryValueExA LookupPrivilegeValueA AdjustTokenPrivileges AllocateAndInitializeSid EqualSid FreeSid OpenThreadToken OpenProcessToken GetTokenInformation LookupAccountSidA GetUserNameA UnlockServiceDatabase OpenSCManagerA EnumServicesStatusA GetServiceDisplayNameA QueryServiceStatus ControlService StartServiceA DeleteService CloseServiceHandle CreateServiceA OpenServiceA RegCloseKey RegConnectRegistryA RegEnumValueA RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA

shell32

DragFinish ExtractIconA ShellExecuteA SHBrowseForFolderA SHAppBarMessage Shell_NotifyIconA SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc ShellExecuteExA SHGetFileInfoA DragQueryFileA

comctl32

_TrackMouseEvent ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes OleInitialize OleUninitialize CoCreateInstance CreateStreamOnHGlobal CoInitialize CoUninitialize CLSIDFromProgID CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoGetClassObject OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject CoRegisterMessageFilter CoFreeUnusedLibraries StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

SysAllocStringLen SysFreeString VariantChangeType SysAllocStringByteLen SysAllocString VariantCopy VariantClear LoadTypeLi VariantTimeToSystemTime SysStringLen RegisterTypeLi

urlmon

URLDownloadToFileA

wininet

InternetFindNextFileA FtpFindFirstFileA HttpQueryInfoA HttpSendRequestA InternetErrorDlg HttpOpenRequestA FtpOpenFileA FtpGetCurrentDirectoryA FtpSetCurrentDirectoryA InternetConnectA InternetQueryDataAvailable InternetReadFile InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetSetOptionExA InternetCloseHandle InternetOpenA InternetQueryOptionA InternetCanonicalizeUrlA InternetCrackUrlA InternetGetLastResponseInfoA InternetGetConnectedState FtpCreateDirectoryA

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

stampmanage_2023.ts3

winmm

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

wininet

netapi32

generic