cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992

Sharing

Copy URL Twitter E-mail

General

Target
cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992
Size 929KB
Sample260805-bgr94sbd57
SHA256 cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992
MD5 4561a9fa2fe2e73317e576a8b0d85517
SHA1 0d33073e213e11e606325956cc1481ac8e47767a
SHA512 4b501605994ab86b09341cecf5752bbbb48526fab9fb73dba3adbbfc5f441c51a7c019d53270d72fdf81ae08fefdbc4ac114e96393c9e922fd6c14384130cb79
SSDEEP 12288:Zp0qSDP5Ly/jUrzznnf3Xlg0zn87idFc3MdqnNauf+HW5cZYQzEqljzN3cOD5Ucl:B2Qu5x6+HW5vQzdd3LD5EZ34
TLSH
T1CE156C10B640C039F8F345B69EBE459DA43CBE310B6840CBB3C469AE5B659E2BD32757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992

File Explorer

cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992

.exe 929KB

cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992

IMPHASH 64a32356c9ef5eb786d297ff577b77dc
SHA256 cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992
MD5 4561a9fa2fe2e73317e576a8b0d85517
SHA1 0d33073e213e11e606325956cc1481ac8e47767a
SHA512 4b501605994ab86b09341cecf5752bbbb48526fab9fb73dba3adbbfc5f441c51a7c019d53270d72fdf81ae08fefdbc4ac114e96393c9e922fd6c14384130cb79
SSDEEP 12288:Zp0qSDP5Ly/jUrzznnf3Xlg0zn87idFc3MdqnNauf+HW5cZYQzEqljzN3cOD5Ucl:B2Qu5x6+HW5vQzdd3LD5EZ34
TLSH
T1CE156C10B640C039F8F345B69EBE459DA43CBE310B6840CBB3C469AE5B659E2BD32757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1b:71:cf:44:8b:9c:12:36:8c:db:20:80:d1:fa:5f:6a:43:18:71:c8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO BO2012Launcher

Chains

Aug 4, 2026

CN=7HS-GO BO2012Launcher

Subject

CN=7HS-GO BO2012Launcher

Serial Number

19:0f:68:e5:e2:6d:3f:ac:47:f2:f8:5c:ed:7a:2f:83

Issuer

CN=7HS-GO BO2012Launcher

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 4, 2026 - Aug 4, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

406864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_dbg_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW

comctl32

ord413 InitCommonControlsEx ord410

ws2_32

WSACleanup WSAStartup freeaddrinfo getaddrinfo WSAAddressToStringW gethostname

shlwapi

PathFileExistsW

kernel32

GetCurrentDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW DeleteFileW WriteFile CloseHandle CreateProcessW CreateFileW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetProcessHeap HeapAlloc GetModuleFileNameA HeapQueryInformation HeapSize HeapReAlloc HeapFree GetOEMCP GetACP IsValidCodePage WriteConsoleW FindClose GetFileType CreateThread WaitForSingleObjectEx OutputDebugStringW SetConsoleCtrlHandler GetCurrentThreadId GetCurrentThread LoadLibraryExW AreFileApisANSI ExitProcess GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetLastError CreateSemaphoreW GetProcAddress GetModuleHandleW GetTickCount GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep GetEnvironmentStringsW FreeEnvironmentStringsW GetTimeZoneInformation FreeLibrary VirtualQuery GetConsoleCP GetConsoleMode SetEnvironmentVariableA SetFilePointerEx SetStdHandle CreateEventW InitializeCriticalSectionAndSpinCount FlushFileBuffers OutputDebugStringA GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent GetModuleFileNameW GetModuleHandleExW HeapValidate GetSystemInfo GetCommandLineW FatalAppExitA GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError

user32

LoadIconW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC DestroyIcon SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW GetDC

gdi32

SetTextColor SetBkColor SelectObject EnumFontFamiliesExW DeleteObject CreateSolidBrush CreateFontW GetStockObject SetBkMode

ole32

CoInitializeEx

crypt32

CertCloseStore

Sharing

General

Malware Config

Signatures

File Explorer

cc1a3f1b101c6db99b7b329707f2935258c1a8e5b3415ace11a54870224a3992

PE Signature issue

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

ole32

crypt32

generic