3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39

Sharing

Copy URL Twitter E-mail

General

Target
3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39
Size 577KB
Sample260802-kh6csswwes
SHA256 3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39
MD5 5022b06a49d38d5a792bd04ab6753f31
SHA1 89e1c475ae17d11d482190bc93c0093e614c8df6
SHA512 d04cb47306f3075cd6e289b9af427d1d128c472956a077e82871f0b24771c524e674d497ccaac028e38daee0ce00d420a655fd6ad31496cfc14db893893878c9
SSDEEP 12288:N6G+B//H2KmdhtyhqsRvUG6hyKyVkKB0HauB++z4SBjvrEH7A:NAYa8Gj4HB++prEH7A
TLSH
T1ABC49D2037C9CA7AE5B326323A7C96A6446DBD384FB4C1CB63C4596DD8745C289B1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39

File Explorer

3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39

.exe 577KB

3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39

IMPHASH bf711d7589d4acb46a29244846716476
SHA256 3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39
MD5 5022b06a49d38d5a792bd04ab6753f31
SHA1 89e1c475ae17d11d482190bc93c0093e614c8df6
SHA512 d04cb47306f3075cd6e289b9af427d1d128c472956a077e82871f0b24771c524e674d497ccaac028e38daee0ce00d420a655fd6ad31496cfc14db893893878c9
SSDEEP 12288:N6G+B//H2KmdhtyhqsRvUG6hyKyVkKB0HauB++z4SBjvrEH7A:NAYa8Gj4HB++prEH7A
TLSH
T1ABC49D2037C9CA7AE5B326323A7C96A6446DBD384FB4C1CB63C4596DD8745C289B1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

92:2e:40:b7:fb:ef:b4:4c:92:da:11:b5:6e:79:c6:62:a7:1c:e0:67:89:30:00:bf:41:3e:31:84:9f:84:a6:a9

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Jan 20, 2023

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

06:36:af:b1:da:06:ca:97:91:38:8b:36:e2:58:d0:48

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 17, 2022 - Oct 15, 2025

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

153840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\u\workspace\InstallerCore_vs2017\sw\rel\gpu_drv\installer_core\installer_core_vs2017\Build\Core\Out\Win32\Release\setup.pdb

kernel32

CreateEventW CloseHandle RaiseException DecodePointer SetLastError DebugBreak Sleep IsDebuggerPresent EnterCriticalSection GetCurrentProcess LeaveCriticalSection GetVersionExW LocalFree FormatMessageW InitializeCriticalSectionEx GetLastError DeleteCriticalSection WideCharToMultiByte GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy FindResourceExW FindResourceW LoadResource LockResource SetErrorMode SizeofResource WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA InitializeCriticalSectionAndSpinCount FreeLibrary GetModuleFileNameW GetModuleHandleExW GetProcAddress LoadLibraryW FileTimeToSystemTime MultiByteToWideChar SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindNextFileW GetFileAttributesW GetTempPathW GetSystemDirectoryW lstrcmpW TerminateProcess ExpandEnvironmentStringsW LocalAlloc VerSetConditionMask CompareFileTime GetFullPathNameW OutputDebugStringW GetModuleHandleW LoadLibraryExW lstrcmpA VerifyVersionInfoW GetSystemInfo FormatMessageA SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetStdHandle WriteFile GetACP GetFileType LCMapStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo

user32

MessageBoxW

advapi32

OpenProcessToken GetTokenInformation RegOpenCurrentUser RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegCloseKey RegQueryInfoKeyW RegQueryValueExW RegSetValueExW LsaNtStatusToWinError

ole32

CoInitializeEx CoUninitialize CoInitializeSecurity

oleaut32

SafeArrayCreate SafeArrayGetVartype SafeArrayCopy SafeArrayUnlock SafeArrayLock SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantClear VariantInit SafeArrayDestroy SysStringLen SysAllocStringLen SysAllocString SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

3133e34682ede7278a3e860c664d5eba83bd0d9d19c6b833c2b349215d9d1c39

PE Signature issue

kernel32

user32

advapi32

ole32

oleaut32

generic