6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357

Sharing

Copy URL Twitter E-mail

General

Target
6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357
Size 232KB
Sample260805-bjkytabd75
SHA256 6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357
MD5 8e29ebdffe9b041f03ef6b8994853d79
SHA1 469a2cb5e43cdb521a1588c3577bbc7b72470300
SHA512 1cdf60947269ecef5889fe95af393f4b0f5a8c3902025dfdc6cf01784424afaf244255c8f098b1a0f795db9ea2745ed9a03c0ea10ff1ed985d83a4ef40d42e90
SSDEEP 3072:1AYbHbPkDp/+3aI55UT2pNeryRym+YOMP5Rl/XdgYj0UyLPIxBn/sb:1AoPklSt2T2W2RJUMVldUIxBn/sb
TLSH
T13C348D223AD48076D173023649F9B63151BDBDB14F669A0FB7985F1E1A309C3BA35B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357

File Explorer

6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357

.exe 232KB

6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357

IMPHASH 8bec7c950be0e54b25f669cef72d00bc
SHA256 6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357
MD5 8e29ebdffe9b041f03ef6b8994853d79
SHA1 469a2cb5e43cdb521a1588c3577bbc7b72470300
SHA512 1cdf60947269ecef5889fe95af393f4b0f5a8c3902025dfdc6cf01784424afaf244255c8f098b1a0f795db9ea2745ed9a03c0ea10ff1ed985d83a4ef40d42e90
SSDEEP 3072:1AYbHbPkDp/+3aI55UT2pNeryRym+YOMP5Rl/XdgYj0UyLPIxBn/sb:1AoPklSt2T2W2RJUMVldUIxBn/sb
TLSH
T13C348D223AD48076D173023649F9B63151BDBDB14F669A0FB7985F1E1A309C3BA35B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

40:c3:7b:e5:38:bf:bc:5f:9a:41:87:93:54:fe:4f:27:59:3d:09:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO BO2012Launcher

Chains

Aug 4, 2026

CN=7HS-GO BO2012Launcher

Subject

CN=7HS-GO BO2012Launcher

Serial Number

19:0f:68:e5:e2:6d:3f:ac:47:f2:f8:5c:ed:7a:2f:83

Issuer

CN=7HS-GO BO2012Launcher

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 4, 2026 - Aug 4, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

67342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW

comctl32

ord413 InitCommonControlsEx ord410

ws2_32

WSACleanup WSAStartup freeaddrinfo getaddrinfo WSAAddressToStringW gethostname

shlwapi

PathFileExistsW

kernel32

GetCurrentDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW DeleteFileW WriteFile CloseHandle CreateProcessW CreateFileW HeapReAlloc GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameW GetFileType GetStdHandle GetProcessHeap FindClose IsDebuggerPresent HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW IsProcessorFeaturePresent GetProcAddress GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryExW GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW SetStdHandle WriteConsoleW HeapAlloc GetCPInfo FlushFileBuffers GetCurrentThreadId GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW

user32

LoadIconW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC DestroyIcon SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW GetDC

gdi32

SetTextColor SetBkMode SetBkColor SelectObject EnumFontFamiliesExW CreateSolidBrush CreateFontW GetStockObject DeleteObject

ole32

CoInitializeEx

crypt32

CertCloseStore

Sharing

General

Malware Config

Signatures

File Explorer

6657ad3ef5c763a38fc1abf318dc4f591023e8df562501e4ccea5cfc0c871357

PE Signature issue

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

ole32

crypt32

generic