iview475_x64_setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
iview475_x64_setup.exe
Size 4.3MB
Sample260728-3dblqsce45
SHA256 6b7e36c089194347be1bea5fea08dc97316f2181e40427e7e2867ad7ba3906a0
MD5 ac62ec37b1768b624fb0fdf7ec3994df
SHA1 ba223b04d6dd1724bb8eb752158cee3c4d776bf4
SHA512 efb9177a73600a94ab24239d35ea2d515eb894f2be0d892d3e5040c034d92bd1016045d4b178e3fe442b0b2506dfdc4dcc6ebb5701a9bfecc4b18caf31aeeba1
SSDEEP 98304:aD+QJkOV6OZ+KS9AFrXXkMVKyaic0652s2ZRAtE5Ecxi6w:aDFk4Z+x9AZjVZaiotmAtE2Ww
TLSH
T11F26239AB7A800F5E0779538C857461AD375B8191B34DB8F236CA27E2F335905D3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

iview475_x64_setup.exe

.exe 4.3MB

iview475_x64_setup.exe

IMPHASH 995fe6a2223c327eaa276cc88af5a84a
SHA256 6b7e36c089194347be1bea5fea08dc97316f2181e40427e7e2867ad7ba3906a0
MD5 ac62ec37b1768b624fb0fdf7ec3994df
SHA1 ba223b04d6dd1724bb8eb752158cee3c4d776bf4
SHA512 efb9177a73600a94ab24239d35ea2d515eb894f2be0d892d3e5040c034d92bd1016045d4b178e3fe442b0b2506dfdc4dcc6ebb5701a9bfecc4b18caf31aeeba1
SSDEEP 98304:aD+QJkOV6OZ+KS9AFrXXkMVKyaic0652s2ZRAtE5Ecxi6w:aDFk4Z+x9AZjVZaiotmAtE2Ww
TLSH
T11F26239AB7A800F5E0779538C857461AD375B8191B34DB8F236CA27E2F335905D3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

41:05:69:4d:a6:08:ac:2f:7e:37:b9:42:54:db:27:21:86:00:27:fe:0a:3a:86:e8:b2:19:26:9f:12:cc:82:66

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT

Chains

May 14, 2026

CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT

Serial Number

3f:54:20:92:be:51:82:36:46:2d:c1:ac:e2:e0:7f:ae

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 2, 2023 - Aug 1, 2026

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

172848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentDirectoryW DeleteFileW CreateFileW FindClose FindFirstFileW FlushFileBuffers GetFullPathNameW GetVolumeInformationW ReadFile SetEndOfFile SetFilePointer WriteFile FindResourceExW SetErrorMode FileTimeToLocalFileTime GetFileAttributesExW GetFileTime LocalFileTimeToFileTime SetFileTime CreateDirectoryW GetLocalTime SetEnvironmentVariableW SetCurrentDirectoryW IsDebuggerPresent IsProcessorFeaturePresent RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader ExitProcess GetUserDefaultUILanguage HeapQueryInformation GetStdHandle GetFileType GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW GetDriveTypeW GetConsoleMode ReadConsoleW GetConsoleCP SetFilePointerEx GetTimeZoneInformation OutputDebugStringW LCMapStringW SetStdHandle WriteConsoleW SetEnvironmentVariableA DosDateTimeToFileTime GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc FileTimeToSystemTime InitializeCriticalSection GlobalFlags WaitForSingleObject CloseHandle VirtualProtect GetPrivateProfileIntW lstrcmpA GetVersionExW GetCurrentThread GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryExW GetCurrentThreadId LeaveCriticalSection EnterCriticalSection EncodePointer LoadLibraryExA FormatMessageW LocalFree GlobalFree GlobalAlloc GlobalUnlock GlobalLock GetCurrentProcessId QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetModuleHandleExW InitializeCriticalSectionAndSpinCount SetLastError OutputDebugStringA GetACP Sleep FreeResource GetModuleHandleA LockResource VerifyVersionInfoW GetTempPathW WritePrivateProfileStringW MultiByteToWideChar GetModuleFileNameW SizeofResource GetPrivateProfileStringW MoveFileExW VerSetConditionMask LoadResource FindResourceW GetDateFormatW GetEnvironmentVariableW GetProcAddress GetSystemDirectoryW GetModuleHandleW GetCurrentProcess GetCommandLineW lstrcpyW GetWindowsDirectoryW WinExec lstrcatW lstrlenW LoadLibraryW WideCharToMultiByte FreeLibrary DeleteCriticalSection DecodePointer HeapSize GetLastError RaiseException InitializeCriticalSectionEx MulDiv GetProcessHeap HeapFree HeapAlloc HeapReAlloc

user32

SetPropW GetPropW RemovePropW GetWindowTextW GetWindowTextLengthW AdjustWindowRectEx MapWindowPoints GetWindowLongPtrW SetWindowLongPtrW GetClassLongPtrW GetClassNameW GetTopWindow GetWindow SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx WinHelpW MonitorFromWindow GetMonitorInfoW ShowWindow SetDlgItemTextW GetDlgItemTextW IsDlgButtonChecked SendDlgItemMessageW SetWindowTextW IsDialogMessageW PostQuitMessage GetAsyncKeyState MapDialogRect GetMessageW TranslateMessage GetCursorPos CreateDialogIndirectParamW EndDialog GetNextDlgTabItem RealChildWindowFromPoint GetSysColorBrush DestroyMenu CharUpperW ValidateRect GetForegroundWindow SetActiveWindow SetMenu GetMenu GetCapture GetKeyState SetFocus GetDlgCtrlID GetDlgItem IsWindowVisible SetWindowPos DestroyWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime PeekMessageW DispatchMessageW RegisterWindowMessageW GetMenuItemCount GetMenuItemID GetSubMenu ClientToScreen EndPaint BeginPaint TabbedTextOutW GrayStringW DrawTextExW DrawTextW CopyRect GetLastActivePopup GetWindowThreadProcessId GetWindowLongW LoadBitmapW SetMenuItemInfoW SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus SendDlgItemMessageA FillRect DrawIcon RedrawWindow SetForegroundWindow FindWindowExW IsWindowEnabled LoadIconW SystemParametersInfoW GetActiveWindow MessageBoxW GetSystemMetrics UpdateWindow FindWindowW LoadStringW SetCursor SetTimer ScreenToClient GetWindowRect KillTimer GetParent LoadCursorW MessageBeep GetClientRect PtInRect GetDC InflateRect CopyIcon InvalidateRect ReleaseDC SetWindowLongW GetDesktopWindow GetSysColor IsWindow SendMessageW EnableWindow UnregisterClassW GetMessagePos GetMenuCheckMarkDimensions

gdi32

ExtTextOutW CreateSolidBrush Escape GetClipBox PtVisible RectVisible RestoreDC SaveDC SelectObject SetBkMode SetMapMode SetTextColor TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx EnumFontFamiliesExW SetBkColor DeleteObject CreateBitmap GetTextExtentPoint32W CreateFontIndirectW GetObjectW GetStockObject DeleteDC CreateDCW GetDeviceCaps

advapi32

RegSetValueExW RegEnumValueW RegEnumKeyW RegDeleteValueW RegCreateKeyExW RegQueryValueW RegDeleteKeyW RegQueryValueExW RegSetValueW RegCreateKeyW RegCloseKey RegOpenKeyExW

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

iview475_x64_setup.exe

kernel32

user32

gdi32

advapi32

comctl32

generic