b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c

Sharing

Copy URL Twitter E-mail

General

Target
b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c
Size 4.2MB
Sample260826-vrt18sed96
SHA256 b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c
MD5 2af76a74cd29432a2d30c3665ad706a2
SHA1 f2c295adeeb63458b58fd19fd4a3c282412c0943
SHA512 63e2ea9fd971f421a0601c190b963267c7da9d6b2ba5f761eaede5be23466de9e92a781e8cefe227bd091ce048fce934296cb518c778f73426235bb61747cc4a
SSDEEP 98304:6PfxS/9RqHkbpDPNCPPPt111sqd/6TGOl7R+5:8JS/9RqHW5PNCPPPt111se/uGOo
TLSH
T164167C4BAEB30C9DC43E7078CD577916E672BC0C5670564B5AB8F6F0AE732601A1AE13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c

File Explorer

b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c

.exe 4.2MB

b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c

IMPHASH 1dd454b24e5b82c7c29232da4941ca0c
SHA256 b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c
MD5 2af76a74cd29432a2d30c3665ad706a2
SHA1 f2c295adeeb63458b58fd19fd4a3c282412c0943
SHA512 63e2ea9fd971f421a0601c190b963267c7da9d6b2ba5f761eaede5be23466de9e92a781e8cefe227bd091ce048fce934296cb518c778f73426235bb61747cc4a
SSDEEP 98304:6PfxS/9RqHkbpDPNCPPPt111sqd/6TGOl7R+5:8JS/9RqHW5PNCPPPt111se/uGOo
TLSH
T164167C4BAEB30C9DC43E7078CD577916E672BC0C5670564B5AB8F6F0AE732601A1AE13
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

13:ce:4c:36:e9:3c:4a:54:ac:cf:8c:c3:4d:67:78:74:13:f6:01:3f:9e:9a:3e:0d:5e:24:38:39:19:8c:79:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

Chains

Aug 26, 2026

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

PE Signature issue

Digest

52:26:d1:82:1d:e2:b3:f8:6e:11:15:12:fa:ab:43:31:e2:72:28:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

Chains

Aug 26, 2026

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

Subject

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

Serial Number

17:0b:3d:50:5b:5c:56:9f:44:c0:c2:0e:c9:6c:0b:87

Issuer

CN=Void,L=Country,C=Any,1.2.840.113549.1.9.1=#0c0a40676d61696c2e636f6d

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 26, 2026 - Dec 31, 2039

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

2092208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

winmm

PlaySoundA timeEndPeriod timeBeginPeriod

kernel32

GetCurrentThreadId GetModuleHandleW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection ReleaseSemaphore WaitForSingleObjectEx CreateSemaphoreW ExitProcess TerminateProcess GlobalMemoryStatusEx GetSystemInfo RaiseException AddVectoredExceptionHandler RemoveVectoredExceptionHandler CreateThread GetCurrentThread SetThreadPriority GetSystemTimeAsFileTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SystemTimeToFileTime GetLocaleInfoW SetThreadExecutionState QueryPerformanceCounter QueryPerformanceFrequency CreateEventW Sleep LoadLibraryW CreateFileA GetTickCount IsWow64Process EnumResourceNamesW HeapFree GetProcessHeap VerSetConditionMask DeviceIoControl GetOverlappedResult CancelIo ResetEvent FormatMessageW VerifyVersionInfoW GetCommandLineW HeapAlloc GetModuleFileNameW LoadLibraryExW LocalFree WaitForMultipleObjects FormatMessageA GetFileTime TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindClose FindFirstFileExW GetConsoleMode GetFileAttributesExW GetLogicalDrives RemoveDirectoryW CopyFileExW MoveFileExW FlushFileBuffers SetHandleInformation CreatePipe SetNamedPipeHandleState GetExitCodeProcess CreateProcessW GenerateConsoleCtrlEvent MulDiv SetEvent GlobalSize CompareStringA GetModuleHandleExW GetSystemPowerStatus GetLocaleInfoA IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetConsoleCtrlHandler IsProcessorFeaturePresent FreeLibraryAndExitThread ExitThread FlsFree FlsSetValue FlsGetValue FlsAlloc RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetStringTypeW GetCPInfo CompareStringEx DecodePointer EncodePointer InitializeCriticalSectionEx LCMapStringEx InitializeSListHead GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive ReadConsoleW VirtualProtect CreateFileW LoadLibraryA WriteConsoleW AttachConsole OutputDebugStringW GetStdHandle SetErrorMode GetLastError WriteFile SetFilePointerEx SetFilePointer ReadFile GetFileType FindNextFileW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA UnhandledExceptionFilter GetProcAddress FreeLibrary GetEnvironmentVariableA VirtualQueryEx VirtualFreeEx CreateDirectoryA ReadProcessMemory VirtualAllocEx VirtualProtectEx GetFileSizeEx CloseHandle Process32Next CreateToolhelp32Snapshot OpenProcess GetSystemDefaultLangID GetModuleHandleA Module32First WaitForSingleObject Module32Next GetCurrentProcess WriteProcessMemory Process32First GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar OutputDebugStringA HeapSize SetEndOfFile DuplicateHandle RtlUnwind SetStdHandle

user32

RemovePropW SetWindowTextW GetWindowTextW GetWindowTextLengthW GetClipCursor ClipCursor IntersectRect PtInRect SetWindowLongW SetParent SetWindowsHookExW UnhookWindowsHookEx CreateIconFromResource GetQueueStatus RegisterClipboardFormatW GetClipboardSequenceNumber SystemParametersInfoW SystemParametersInfoA DrawTextW SetFocus GetDlgItem EndDialog DialogBoxIndirectParamW EnumWindows GetDesktopWindow PostThreadMessageW GetMessageW RegisterRawInputDevices GetRawInputData IsWindow CreateIconIndirect SetPropW ReleaseDC RegisterClassW SetWindowLongPtrW GetWindowLongPtrW SetForegroundWindow SetMenuItemInfoW GetMenuItemInfoW TrackPopupMenu DeleteMenu InsertMenuW EnableMenuItem CheckMenuItem DestroyMenu CreatePopupMenu CreateWindowExW RegisterWindowMessageW DestroyWindow SetActiveWindow EnableWindow GetClipboardFormatNameA FlashWindowEx SetLayeredWindowAttributes ShowWindow AttachThreadInput CreateIconFromResourceEx DestroyCursor LoadCursorW SetCursorPos CreateWindowExA UnregisterClassA UnregisterDeviceNotification RegisterDeviceNotificationW GetMessageA GetRawInputDeviceList GetRawInputBuffer GetRawInputDeviceInfoA GetMonitorInfoW MonitorFromWindow MonitorFromPoint DestroyIcon ReleaseCapture SetCapture LoadIconW CallNextHookEx GetWindowLongW SetRectEmpty FillRect ScreenToClient ClientToScreen GetCursorPos SetCursor AdjustWindowRectEx GetWindowRect GetClientRect GetPropW ValidateRect GetUpdateRect EndPaint EnumDisplayMonitors EnumDisplayDevicesW EnumDisplaySettingsW ChangeDisplaySettingsExW ToUnicode GetKeyboardState GetKeyboardLayout SetWindowRgn IsClipboardFormatAvailable BeginPaint GetDC GetForegroundWindow GetMenu GetSystemMetrics KillTimer SetTimer MsgWaitForMultipleObjects MapVirtualKeyW GetKeyState IsZoomed IsIconic GetWindowPlacement SetWindowPos GetClassInfoExW RegisterClassExW UnregisterClassW CallWindowProcW DefWindowProcW PostMessageW SendMessageW GetMessageExtraInfo GetMessageTime GetMessagePos PeekMessageW DispatchMessageW TranslateMessage TrackMouseEvent RegisterWindowMessageA GetDoubleClickTime MessageBoxA GetWindowThreadProcessId GetFocus GetWindowLongPtrA SetWindowLongPtrA FindWindowA GetAsyncKeyState OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData EnumClipboardFormats RegisterClassExA

gdi32

ChoosePixelFormat DescribePixelFormat SetPixelFormat SwapBuffers CombineRgn GetTextMetricsW CreateCompatibleBitmap CreateDCW GetDIBits GetPixelFormat GetICMProfileW BitBlt GetTextExtentPoint32A GetDeviceCaps CreateFontIndirectW CreateDIBSection SetPixel SelectObject DeleteDC CreateCompatibleDC CreateBitmap CreateRectRgn CreateSolidBrush DeleteObject

comdlg32

GetOpenFileNameA

advapi32

LookupPrivilegeValueA RegQueryValueExW RegOpenKeyExW RegCloseKey OpenProcessToken AdjustTokenPrivileges

shell32

ShellExecuteW SHBrowseForFolderW SHGetPathFromIDListW DragAcceptFiles SHGetFolderPathW CommandLineToArgvW Shell_NotifyIconW DragFinish DragQueryFileW SHGetKnownFolderPath

ole32

ReleaseStgMedium CoCreateInstance CoTaskMemFree CoInitializeEx CoUninitialize OleUninitialize OleInitialize CLSIDFromString PropVariantClear RevokeDragDrop RegisterDragDrop

oleaut32

SysFreeString

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmGetIMEFileNameA ImmAssociateContext ImmGetCompositionStringW ImmSetCompositionStringW ImmGetCandidateListW ImmGetCompositionFontW ImmNotifyIME ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

setupapi

CM_Get_Parent CM_Get_Device_IDA SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdA CM_Locate_DevNodeA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

755KB

Virtual Size

755KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

750KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

424KB

Virtual Size

424KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b2d32f3cdda49898ca228975149a9968a9ba3e66839b84a70c5806b071b9e83c

PE Signature issue

PE Signature issue

d3d11

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

imm32

d3dcompiler_47

setupapi

version

generic