free-automated-serial-terminal[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
free-automated-serial-terminal.exe
Size 6.3MB
Sample260727-ppvbbsscnd
SHA256 db6c9494c391d6f47264188821edc0d5ead4634682150eb3d363c5b9bde60292
MD5 4199423e7e605e395bbd8b3073ebd294
SHA1 b0fdcecab103b2341c81eccbe0187cced99cfb0d
SHA512 f29a5efd2300ca12e09ddf995d53cb556fce2fd1fe871bdb3d55fffa6ff7fdfbc11840d6c31529da670b95c6a808644d04fdc2001b33ed95620d4068f97ab2d0
SSDEEP 196608:ofY6bF+jieXnM5/Owo9dUQe4wn3GzvrzyQAv0pyoZBb:ow6x+m6nOWwgdTg3xT08oZBb
TLSH
T1B9663316F5CAC0F6E4725E3984F64AB53CBCEF128D60685F83A639370625685B13E24F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

free-automated-serial-terminal.exe

.exe 6.3MB

free-automated-serial-terminal.exe

IMPHASH 9da7641a251ed4e6f1102b982119761f
SHA256 db6c9494c391d6f47264188821edc0d5ead4634682150eb3d363c5b9bde60292
MD5 4199423e7e605e395bbd8b3073ebd294
SHA1 b0fdcecab103b2341c81eccbe0187cced99cfb0d
SHA512 f29a5efd2300ca12e09ddf995d53cb556fce2fd1fe871bdb3d55fffa6ff7fdfbc11840d6c31529da670b95c6a808644d04fdc2001b33ed95620d4068f97ab2d0
SSDEEP 196608:ofY6bF+jieXnM5/Owo9dUQe4wn3GzvrzyQAv0pyoZBb:ow6x+m6nOWwgdTg3xT08oZBb
TLSH
T1B9663316F5CAC0F6E4725E3984F64AB53CBCEF128D60685F83A639370625685B13E24F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

83:2f:33:18:eb:69:d7:ed:33:e6:57:42:cb:56:44:42:cc:ea:ed:b3:03:54:52:1b:45:1f:32:71:fd:28:74:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d

Chains

Oct 22, 2024

CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d

Serial Number

04:f3:0e:3d:a6:cd:84:cd:8f:88:f6:c8

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 27, 2023 - Jun 23, 2026

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

32224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\MyProjects\Elizabeth3\out\SfxSetup.pdb

user32

MessageBoxA

shell32

ShellExecuteW

kernel32

EnterCriticalSection WriteConsoleW SetFilePointerEx GetConsoleMode GetLastError CreateFileW CloseHandle ReadFile WriteFile SetFilePointer IsProcessorFeaturePresent GetProcAddress GetModuleHandleW LoadLibraryExW FindFirstFileW FindClose SetFileAttributesW DeleteFileW FindNextFileW RemoveDirectoryW GetModuleFileNameW GetCommandLineW GetTempPathW GetTickCount GetCurrentThreadId GetCurrentProcessId CreateDirectoryW IsWow64Process GetCurrentProcess SetFileTime GetCurrentDirectoryW SetCurrentDirectoryW GetVersionExW SetEnvironmentVariableW CreateProcessW WaitForSingleObject GetExitCodeProcess QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess GetConsoleCP RtlUnwind SetLastError DecodePointer LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary RaiseException GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapAlloc HeapFree FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

free-automated-serial-terminal.exe

user32

shell32

kernel32

generic