LG-Mobile-Support-Toolv1[.]8[.]9[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
LG-Mobile-Support-Toolv1.8.9.0.exe
Size 245KB
Sample260809-vwlwesar31
SHA256 d254a85d4a90cdcbb86454149c10154ae2795326e20baae2e3ccac1af6dc2aa2
MD5 67ca36b29656f214920b05b1ea8c6f9f
SHA1 0cecaedbe7ec865fa381a97a2c26dbd0c3bda423
SHA512 808e8b06ffb1a3710d8d84cdc2b64124bd0db01c5a43b50e05f20903463f578c2348d4e6d0479ab7d801ea12f66033afec5cfc47b0465412a5ac4c85650a478d
SSDEEP 3072:7OjvyfEY+CoHUJBW3dsQnqhDCpJAt44dh72XeE082LFO/m6lxFMJWlA6hr1QW:KOfTMUJBQsCpStXtJQ5hCW
TLSH
T1C7349F133690C8B7C55211314FE1DFBBF6BAF9504E629A4373D88F1E9E3B6818636216
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
LG-Mobile-Support-Toolv1.8.9.0.exe

File Explorer

LG-Mobile-Support-Toolv1.8.9.0.exe

.exe 245KB

LG-Mobile-Support-Toolv1.8.9.0.exe

IMPHASH 49a5e622e48e901be1960bff8f3d9e89
SHA256 d254a85d4a90cdcbb86454149c10154ae2795326e20baae2e3ccac1af6dc2aa2
MD5 67ca36b29656f214920b05b1ea8c6f9f
SHA1 0cecaedbe7ec865fa381a97a2c26dbd0c3bda423
SHA512 808e8b06ffb1a3710d8d84cdc2b64124bd0db01c5a43b50e05f20903463f578c2348d4e6d0479ab7d801ea12f66033afec5cfc47b0465412a5ac4c85650a478d
SSDEEP 3072:7OjvyfEY+CoHUJBW3dsQnqhDCpJAt44dh72XeE082LFO/m6lxFMJWlA6hr1QW:KOfTMUJBQsCpStXtJQ5hCW
TLSH
T1C7349F133690C8B7C55211314FE1DFBBF6BAF9504E629A4373D88F1E9E3B6818636216
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c8:37:bb:95:35:c7:f8:32:41:0c:51:ad:1c:e8:d5:ae

Digest Algorithm

md5

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=LG Electronics\, ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=LG Electronics\, ltd.,L=Pyeongtaek,ST=GYEONGGI-DO,C=KR

Chains

Jan 1, 0001

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Timespan

Jan 29, 1996 - Aug 1, 2028

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=LG Electronics\, ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=LG Electronics\, ltd.,L=Pyeongtaek,ST=GYEONGGI-DO,C=KR

Serial Number

11:43:bc:ca:77:ce:8d:e8:fa:d2:69:7b:a6:d3:52:35

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 5, 2009 - Jun 5, 2010

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

Major OS version

Entry point

55334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupIterateCabinetA

wininet

InternetQueryOptionA InternetGetLastResponseInfoA InternetCanonicalizeUrlA InternetQueryDataAvailable InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetOpenUrlA InternetOpenA InternetReadFile InternetCloseHandle InternetCrackUrlA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

kernel32

GetFileSize GetFileTime SetErrorMode GetTickCount RtlUnwind HeapFree HeapAlloc GetStartupInfoA GetCommandLineA ExitProcess CreateThread ExitThread RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation SetStdHandle GetFileType LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetStringTypeA GetStringTypeW GetOEMCP SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr CompareStringA CompareStringW SetEnvironmentVariableA GetProfileStringA CreateDirectoryA DeleteFileA SetFileAttributesA GetFileAttributesA CloseHandle CreateFileA GetLocaleInfoA SetCurrentDirectoryA CopyFileA GetSystemDirectoryA GetVersionExA Process32Next GetPriorityClass OpenProcess Process32First CreateToolhelp32Snapshot TerminateProcess GetExitCodeProcess MultiByteToWideChar WideCharToMultiByte GetCurrentThreadId GetCurrentThread lstrcmpiA lstrcmpA GlobalDeleteAtom GlobalAlloc GlobalLock GetModuleFileNameA WaitForSingleObject SetEvent GetCPInfo FileTimeToLocalFileTime FileTimeToSystemTime SizeofResource GetProcessVersion GetCurrentDirectoryA WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue GlobalReAlloc TlsFree GlobalHandle TlsAlloc LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection LocalAlloc EnterCriticalSection GetThreadLocale GetFullPathNameA GetVolumeInformationA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentProcess DuplicateHandle lstrcpynA MulDiv LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GetModuleHandleA GetProcAddress FindNextFileA lstrcpyA FindFirstFileA GetLastError SetLastError FindClose FormatMessageA LocalFree InterlockedDecrement InterlockedIncrement lstrlenA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CreateEventA SuspendThread SetThreadPriority ResumeThread GetDriveTypeA

user32

CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep InvalidateRect RegisterClipboardFormatA PostThreadMessageA GetClassNameA LoadCursorA GetDesktopWindow CharUpperA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus AdjustWindowRectEx ScreenToClient CharNextA GetTopWindow IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode wsprintfA GetWindowPlacement GetWindowRect MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId CopyRect GetDC ReleaseDC EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem InflateRect GetSysColorBrush PtInRect GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA SendMessageA LoadIconA SetTimer AppendMenuA GetSystemMenu DrawIcon GetClientRect GetSystemMetrics IsIconic KillTimer EnableWindow PostMessageA PostQuitMessage SetCursor MessageBoxA GetWindowLongA IsWindowEnabled GetLastActivePopup GetParent SetWindowsHookExA GetCursorPos PeekMessageA IsWindowVisible ValidateRect CallNextHookEx GetKeyState GetActiveWindow DispatchMessageA TranslateMessage DestroyMenu

gdi32

SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject ScaleViewportExtEx GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetMapMode DPtoLP GetTextColor GetBkColor LPtoDP SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox GetTextExtentPointA BitBlt CreateCompatibleDC PatBlt CreateDIBitmap CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegFlushKey RegSetValueExA RegCloseKey

shell32

ShellExecuteA SHGetSpecialFolderPathA

comctl32

ord17

oledlg

ord8

ole32

CoUninitialize CoCreateInstance CoInitialize CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoTaskMemFree CoTaskMemAlloc OleInitialize OleUninitialize OleFlushClipboard CoRegisterMessageFilter OleIsCurrentClipboard CoRevokeClassObject CoFreeUnusedLibraries

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen

urlmon

URLDownloadToFileA

wsock32

gethostname WSAStartup gethostbyname inet_addr

Sharing

General

Malware Config

Signatures

File Explorer

LG-Mobile-Support-Toolv1.8.9.0.exe

PE Signature issue

setupapi

wininet

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

wsock32

generic