Adobe_Acroba_DC_安装向导[.]exe[.]virus

Sharing

Copy URL Twitter E-mail

General

Target
Adobe_Acroba_DC_安装向导.exe.virus
Size 3.0MB
Sample260909-jv697at1fw
SHA256 95dfcedd66ad93cadd6277dfe4d0c138e182ba615e672cd094ceee00e19a19f3
MD5 0792544b8395a91497a1c734582094ca
SHA1 96d529570c85163ccd28a133638fac3091a1a74e
SHA512 68ab3d13c3b1ad9f5cd29e66464fa346d3cdfa16ea965f0aaa388c919dfbe87625748a9833d7e311909f7c37215defa96c1f784aecaebe6e510c901cdae70c0d
SSDEEP 49152:UO2XlMUj3PPF5uGJvdFSpZydEa5id8Af775BWUFR5DJRCmTaBBBBBBBBBBBBBBBd:B21RJvdoZydEagym75o4R5DeBBBBBBBd
TLSH
T143E5E1137582CAB2D27F12309A48B75A56EBBE700E3447DB23D41F1DBF704D2AA66253
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Adobe_Acroba_DC_安装向导.exe.virus

.exe 3.0MB

Adobe_Acroba_DC_安装向导.exe.virus

IMPHASH 5eba9d67e4e5be799f3050417f640712
SHA256 95dfcedd66ad93cadd6277dfe4d0c138e182ba615e672cd094ceee00e19a19f3
MD5 0792544b8395a91497a1c734582094ca
SHA1 96d529570c85163ccd28a133638fac3091a1a74e
SHA512 68ab3d13c3b1ad9f5cd29e66464fa346d3cdfa16ea965f0aaa388c919dfbe87625748a9833d7e311909f7c37215defa96c1f784aecaebe6e510c901cdae70c0d
SSDEEP 49152:UO2XlMUj3PPF5uGJvdFSpZydEa5id8Af775BWUFR5DJRCmTaBBBBBBBBBBBBBBBd:B21RJvdoZydEagym75o4R5DeBBBBBBBd
TLSH
T143E5E1137582CAB2D27F12309A48B75A56EBBE700E3447DB23D41F1DBF704D2AA66253
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

9b:00:e9:21:d0:68:a0:00:49:1c:8e:6b:23:64:ad:59:ba:a9:73:48:d6:f1:e0:b6:b4:88:9a:43:ee:5c:cf:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91520602MADHP85U10,CN=Guizhou Aidobi Technology Co.\, Ltd.,O=Guizhou Aidobi Technology Co.\, Ltd.,L=Tongren,ST=Guizhou,C=CN,1.3.6.1.4.1.311.60.2.1.1=#1307546f6e6772656e,1.3.6.1.4.1.311.60.2.1.2=#13074775697a686f75,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 9, 2025

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

4f:04:2c:f8:83:65:23:73:c1:6d:5d:24

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 21, 2024 - May 22, 2026

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

1005488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\kele-installer\src\KeleInstaller\Builds\VisualStudio2017\Win32\ReleaseADC360\App\ADC_20020.pdb

kernel32

SetThreadPriority LeaveCriticalSection InitializeCriticalSection SetFilePointer SetEndOfFile GetTempPathW CreateMutexW FindClose GetLocaleInfoW CreateFileW GetFileAttributesW GetCurrentThreadId ReleaseMutex GetSystemDirectoryW ResumeThread SetFileAttributesW CreateEventW GetFileInformationByHandle FormatMessageW GetFileAttributesExW OutputDebugStringW SetEvent GetLogicalProcessorInformation GetCurrentThread TerminateThread QueryPerformanceFrequency GetThreadPriority DeleteFileW GetCurrentDirectoryW ReplaceFileW ExitProcess CopyFileW CreateSymbolicLinkW QueryPerformanceCounter MoveFileW IsDebuggerPresent SetUnhandledExceptionFilter FlushFileBuffers GetCommandLineW AttachConsole CompareStringOrdinal GlobalSize LoadLibraryA GlobalAlloc GlobalFree GlobalLock GlobalUnlock AreFileApisANSI WriteConsoleW SetStdHandle SetEnvironmentVariableW GetEnvironmentStringsW GetCommandLineA FindFirstFileExW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetOEMCP GetACP IsValidCodePage GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetStdHandle ExitThread GetTimeZoneInformation RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore VirtualFree VirtualProtect VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer CreateThread SignalObjectAndWait CreateTimerQueue FormatMessageA InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter ResetEvent GetStringTypeW LCMapStringW CompareStringW GetCPInfo EncodePointer GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError SwitchToThread WaitForSingleObjectEx DuplicateHandle SetFileTime RemoveDirectoryW GetModuleHandleExW GetCurrentProcess FindNextFileW SetPriorityClass FindFirstFileW TryEnterCriticalSection SetThreadAffinityMask CreateDirectoryW GetModuleFileNameW GetExitCodeProcess GetModuleHandleA WaitForSingleObject CreatePipe WriteFile SetHandleInformation ReadFile GetDiskFreeSpaceExA GetCurrentProcessId GetTickCount64 GetLogicalDriveStringsA K32EnumProcesses CloseHandle Process32FirstW QueryFullProcessImageNameA Process32NextW CreateToolhelp32Snapshot OpenProcess K32GetModuleFileNameExW GetDriveTypeA TerminateProcess GetModuleHandleW FindResourceW LoadResource FindResourceExW LockResource SizeofResource EnterCriticalSection LocalFree LocalAlloc GetTickCount FreeLibrary GlobalMemoryStatusEx GetProcAddress LoadLibraryW Sleep GetVersionExW WideCharToMultiByte MultiByteToWideChar VerifyVersionInfoW VerSetConditionMask GetProcessHeap DeleteCriticalSection HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx HeapFree FreeEnvironmentStringsW

user32

AttachThreadInput UnregisterClassW GetWindowThreadProcessId GetWindowTextW SetWindowLongW RegisterClassExW GetSystemMenu GetMessageExtraInfo GetUpdateRgn GetMessagePos CreateWindowExW DestroyWindow GetFocus SendMessageTimeoutW PostMessageW DefWindowProcW GetMessageW GetWindowLongW ReleaseDC GetDC EndPaint BeginPaint GetCursorPos SetCursorPos GetAncestor InvalidateRect ReleaseCapture GetParent SystemParametersInfoW EnableMenuItem GetDesktopWindow ShowCaret UpdateLayeredWindow SetCursor ToUnicode SetClipboardData SetWindowsHookExW SetCapture DestroyCaret LoadCursorW GetClipboardData BringWindowToTop SetLayeredWindowAttributes GetMessageTime UnhookWindowsHookEx GetForegroundWindow TrackMouseEvent MapWindowPoints CreateCaret IsChild EmptyClipboard CloseClipboard CreateIconIndirect GetMonitorInfoW GetWindowInfo DestroyIcon RedrawWindow GetCapture OpenClipboard GetAsyncKeyState TranslateMessage SetFocus MapVirtualKeyW GetWindowRect IsWindowVisible SetWindowPos MonitorFromWindow EnumChildWindows EnumDisplayMonitors EnumWindows PeekMessageW SendMessageW CallNextHookEx IsWindow SetWindowTextW MessageBeep WindowFromPoint GetWindowPlacement DestroyCursor GetKeyboardState SetCaretPos GetActiveWindow ShowWindow DispatchMessageW

gdi32

CreateRectRgnIndirect CreateRectRgn GetRegionData ExcludeClipRect RestoreDC CreateBitmap CombineRgn SelectObject CreateCompatibleDC GetDeviceCaps GetTextMetricsW DeleteDC SetMapperFlags GetGlyphIndicesW GetGlyphOutlineW DeleteObject RemoveFontMemResourceEx SetMapMode CreateFontIndirectW GetOutlineTextMetricsW CreateDIBSection SaveDC StretchDIBits GetKerningPairsW

advapi32

RegQueryValueExW AllocateAndInitializeSid FreeSid CheckTokenMembership RegCloseKey RegOpenKeyExW RegCreateKeyExW RegSetValueExW

shell32

ExtractAssociatedIconW SHGetSpecialFolderPathW ShellExecuteA SHGetSpecialFolderPathA DragQueryFileW ShellExecuteW ShellExecuteExW

ole32

OleInitialize CoTaskMemAlloc OleUninitialize CoCreateInstance CoUninitialize CoInitialize CoCreateGuid DoDragDrop RegisterDragDrop RevokeDragDrop

oleaut32

SafeArrayAccessData SafeArrayPutElement SysAllocString SafeArrayDestroy SafeArrayCreateVector SysFreeString SysStringLen SysAllocStringLen SafeArrayUnaccessData

crypt32

CertFreeCertificateContext CryptQueryObject CryptMsgClose CertGetNameStringA CertFindCertificateInStore CryptMsgGetParam CertCloseStore

wininet

InternetWriteFile InternetSetOptionW FtpOpenFileW InternetOpenW HttpOpenRequestW HttpQueryInfoW InternetSetFilePointer InternetCrackUrlW HttpEndRequestW HttpSendRequestExW InternetCloseHandle InternetConnectW InternetReadFile InternetQueryOptionW

ws2_32

WSAGetLastError

winmm

timeGetTime timeBeginPeriod

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmAssociateContext ImmGetCompositionStringW ImmReleaseContext ImmGetContext ImmNotifyIME

dxgi

CreateDXGIFactory

Sharing

General

Malware Config

Signatures

File Explorer

Adobe_Acroba_DC_安装向导.exe.virus

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

crypt32

wininet

ws2_32

winmm

imm32

dxgi

generic