2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d

Sharing

Copy URL Twitter E-mail

General

Target
2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d
Size 236KB
Sample260804-s4xxjstdqf
SHA256 2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d
MD5 0a82dab82a0ecd605871fe00d29c7bc5
SHA1 c4193c84c43cbb5eed026d97c3905447ac4e37bc
SHA512 63a567919081f7e78bfdc3664e37568ed201852629b56f4f92bf7a61c671e2bb8432d0f4c6390e9206eb4caf1c6e983e36602910986859f8791fd4146451e6c8
SSDEEP 3072:BaE332Y50h2rxS6uqpvBZImxJj+Rn24c302f+uPmLv7ZeUyLiwuv+iyN:BTP0hQSSJj+B231fo9Ltwuv+iC
TLSH
T1D0349D11BAC5C0B2E573023A0DE5A735567EBD724E3ADA4B67940F0E4E30683BA35763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d

File Explorer

2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d

.exe 236KB

2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d

IMPHASH 7649399a6ab1105ff6093dcfcf0bf725
SHA256 2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d
MD5 0a82dab82a0ecd605871fe00d29c7bc5
SHA1 c4193c84c43cbb5eed026d97c3905447ac4e37bc
SHA512 63a567919081f7e78bfdc3664e37568ed201852629b56f4f92bf7a61c671e2bb8432d0f4c6390e9206eb4caf1c6e983e36602910986859f8791fd4146451e6c8
SSDEEP 3072:BaE332Y50h2rxS6uqpvBZImxJj+Rn24c302f+uPmLv7ZeUyLiwuv+iyN:BTP0hQSSJj+B231fo9Ltwuv+iC
TLSH
T1D0349D11BAC5C0B2E573023A0DE5A735567EBD724E3ADA4B67940F0E4E30683BA35763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

46:bb:bf:c5:83:92:02:27:ed:e2:41:b4:b5:fd:2a:63:15:04:32:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO BO2012Launcher

Chains

Aug 4, 2026

CN=7HS-GO BO2012Launcher

Subject

CN=7HS-GO BO2012Launcher

Serial Number

19:0f:68:e5:e2:6d:3f:ac:47:f2:f8:5c:ed:7a:2f:83

Issuer

CN=7HS-GO BO2012Launcher

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 4, 2026 - Aug 4, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

77134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteExW Shell_NotifyIconW

comctl32

InitCommonControlsEx

ws2_32

gethostbyname inet_ntoa WSACleanup gethostname WSAStartup

shlwapi

PathFileExistsW

kernel32

LoadLibraryExW FindClose GetCurrentDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW DeleteFileW RemoveDirectoryW HeapReAlloc GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW GetFileType GetConsoleCP GetProcessHeap GetCurrentThreadId IsDebuggerPresent HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW IsProcessorFeaturePresent GetProcAddress GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError GetConsoleMode SetFilePointerEx OutputDebugStringW SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW CloseHandle GetStdHandle GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW GetCPInfo HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter

user32

SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow GetClassNameW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW LoadIconW LoadCursorW DestroyIcon DrawTextW

gdi32

SetBkMode SetTextColor GetStockObject SetBkColor SelectObject EnumFontFamiliesExW DeleteObject CreateSolidBrush CreateFontW

Sharing

General

Malware Config

Signatures

File Explorer

2d31ef97721b418fdf8ed3d3d6235cc6b044a49f6faad4e8fc49492bdd73fd8d

PE Signature issue

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

generic