267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95

Sharing

Copy URL Twitter E-mail

General

Target
267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95
Size 9.8MB
Sample260802-jav2esfa68
SHA256 267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95
MD5 aa40621eb1562beaafb66a9f2df34ea7
SHA1 19ea6de5e7b924dfeff680794b792e8218629349
SHA512 b39558940b90fe93f5ea976858f0cf2a02c5140b580aadf52d10ec3916ff998862e263ae35c7b81b40ed578f8f66469b1efa5dec70b3257b83984381f4fa176c
SSDEEP 196608:AeYrG8nhkb39FrSHiRMEUn1JO/tuQR8l/f:Ae0Nna5Fr9MNn1s/AQRmn
TLSH
T1BCA6F131BB819561E492F570106A977B4928AD184B30C5D3EAC03EAF68F06F1573A7BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95

File Explorer

267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95

.exe 9.8MB

267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95

IMPHASH 6dc1f4b9bbb4699b92b1d02084422ffc
SHA256 267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95
MD5 aa40621eb1562beaafb66a9f2df34ea7
SHA1 19ea6de5e7b924dfeff680794b792e8218629349
SHA512 b39558940b90fe93f5ea976858f0cf2a02c5140b580aadf52d10ec3916ff998862e263ae35c7b81b40ed578f8f66469b1efa5dec70b3257b83984381f4fa176c
SSDEEP 196608:AeYrG8nhkb39FrSHiRMEUn1JO/tuQR8l/f:Ae0Nna5Fr9MNn1s/AQRmn
TLSH
T1BCA6F131BB819561E492F570106A977B4928AD184B30C5D3EAC03EAF68F06F1573A7BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

8d:f0:77:78:b0:94:7c:a2:01:dd:9e:b3:6a:a3:c4:19:00:4f:e6:cd:68:03:87:c8:52:66:be:97:10:8e:51:d3

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,ST=Taipei City,C=TW

Chains

Mar 16, 2026

CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,ST=Taipei City,C=TW

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,ST=Taipei City,C=TW

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,ST=Taipei City,C=TW

Serial Number

01:8f:43:88:7c:30:62:63:a6:ae:9b:39:19:7e:0d:37

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 17, 2024 - Jun 9, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2085349

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\a\Titanium\Titanium\src\build\symbol\Release\Win32\7zsfx.pdb

ws2_32

shutdown socket setsockopt connect closesocket send recv WSASetLastError getservbyname getservbyport gethostbyaddr inet_ntoa htons htonl WSAGetLastError WSACleanup gethostbyname select ntohs getsockopt ioctlsocket getaddrinfo freeaddrinfo getnameinfo gethostname inet_addr WSAStartup

kernel32

HeapQueryInformation GetCommandLineW GetCommandLineA SetConsoleCtrlHandler PeekNamedPipe FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW ExitProcess RtlUnwind lstrlenA GetLastError LoadLibraryA GetProcAddress GetTempPathA GetTempFileNameA DeleteFileA GlobalFree MultiByteToWideChar WideCharToMultiByte SizeofResource LockResource LoadResource FindResourceW GetModuleFileNameW GetModuleHandleW OutputDebugStringW ExpandEnvironmentStringsW LocalFree CloseHandle DeleteCriticalSection EnterCriticalSection LeaveCriticalSection LocalAlloc CreateFileW LoadLibraryW FreeLibrary GetWindowsDirectoryW SetCurrentDirectoryW WaitForSingleObject GetCurrentProcessId GlobalUnlock RemoveDirectoryW GetUserDefaultUILanguage MulDiv InitializeCriticalSection GlobalLock GetStdHandle GetTempPathW WriteFile SleepEx GetFileAttributesW CreateDirectoryW DeleteFileW GetSystemTime GetTimeZoneInformation lstrcpyW GetDiskFreeSpaceExW SetFileAttributesW GetLogicalDriveStringsW lstrlenW HeapFree InitializeCriticalSectionEx HeapSize HeapReAlloc RaiseException HeapAlloc DecodePointer GetProcessHeap FindFirstFileW MoveFileExW FindNextFileW FindClose IsProcessorFeaturePresent GetSystemDirectoryW SetFileTime MoveFileW GetFullPathNameW GetCurrentDirectoryW GetTempFileNameW LoadLibraryExW GetFileSize SetFilePointer GetFileInformationByHandle ReadFile SetEndOfFile FileTimeToSystemTime GetVersionExW VirtualFree VirtualAlloc GetSystemInfo ReleaseSemaphore CreateEventW SetEvent ResetEvent CreateSemaphoreW WaitForMultipleObjects LCMapStringW GetSystemTimeAsFileTime GetUserDefaultLCID GetLocalTime FlushFileBuffers CopyFileW GetCurrentProcess TerminateProcess IsWow64Process CreateProcessW ResumeThread GetExitCodeProcess CreateMutexW ReleaseMutex PulseEvent IsWow64Process2 GetDriveTypeW AttachConsole GetConsoleScreenBufferInfo SetConsoleScreenBufferSize FreeConsole LoadLibraryExA LCIDToLocaleName LocaleNameToLCID GetSystemDefaultUILanguage IsValidLocale GetUserGeoID GetGeoInfoW GetCurrentThreadId SetThreadPriority GetExitCodeThread WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW SetLastError InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemDirectoryA FormatMessageA VirtualProtect GetEnvironmentVariableW GetFileType GetACP QueryPerformanceCounter GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW OutputDebugStringA InitializeCriticalSectionAndSpinCount GetModuleHandleA GlobalAlloc FormatMessageW GetCurrentThread GlobalDeleteAtom lstrcmpA lstrcmpW CompareStringA EncodePointer GlobalAddAtomW GlobalFindAtomW CompareStringW GlobalReAlloc GlobalHandle LocalReAlloc GetLocaleInfoW GlobalFlags GetVolumeInformationW DuplicateHandle SetErrorMode FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx SystemTimeToTzSpecificLocalTime UnhandledExceptionFilter SetUnhandledExceptionFilter WaitForSingleObjectEx InitializeSListHead IsDebuggerPresent GetStartupInfoW EnumSystemLocalesW GetConsoleOutputCP SetStdHandle IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW VirtualQuery GetSystemDefaultLCID SetDefaultDllDirectories GetStringTypeW TryEnterCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW FindFirstFileExW SetFilePointerEx LCMapStringEx CompareStringEx GetCPInfo

comctl32

InitCommonControlsEx _TrackMouseEvent

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

Sharing

General

Malware Config

Signatures

File Explorer

267d7a9a3f682089517fb1350d61aff516a310205b3cd13ecb92336fb62f5b95

PE Signature issue

ws2_32

kernel32

comctl32

api-ms-win-shcore-scaling-l1-1-1

generic