AcroRdrDCx642200320310_en_US[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AcroRdrDCx642200320310_en_US.exe
Size 405.8MB
Sample260916-tmlcvsdk6y
SHA256 1de4b0b65647e70059abb8c7e0dcb608e347d02a9ec4865fed6ab1f1f52a9f82
MD5 259bd908827f48fad3fa3cab4c3cd909
SHA1 50b8706f1ba6d2be16efe648809e91985fc46429
SHA512 6ece28b0553bf3b2da273ff44a8bc9630eebf39bdca81bfe6248c5e5d25efd1eedd581bccbfae09d76270cf8b4af8d75fff19e20bbd66fc555d163e2db237606
SSDEEP 6291456:7zwRUHohZ0VHvxI0/r8tfbAOoPkqQGE/765yeVRduvLI7r+UidRLo4yfPFDkxmCt:BohZTlbaxQ37OXaUidRViNw1
TLSH
T18E193328E68A4E77D17F303240A749D0159BAC1D8EC65ADB11C0BD3F2EA4567D32B8F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

AcroRdrDCx642200320310_en_US.exe

.exe 405.8MB

AcroRdrDCx642200320310_en_US.exe

IMPHASH 4281c0e7bfa1da52eac152e2da943bfb
SHA256 1de4b0b65647e70059abb8c7e0dcb608e347d02a9ec4865fed6ab1f1f52a9f82
MD5 259bd908827f48fad3fa3cab4c3cd909
SHA1 50b8706f1ba6d2be16efe648809e91985fc46429
SHA512 6ece28b0553bf3b2da273ff44a8bc9630eebf39bdca81bfe6248c5e5d25efd1eedd581bccbfae09d76270cf8b4af8d75fff19e20bbd66fc555d163e2db237606
SSDEEP 6291456:7zwRUHohZ0VHvxI0/r8tfbAOoPkqQGE/765yeVRduvLI7r+UidRLo4yfPFDkxmCt:BohZTlbaxQ37OXaUidRViNw1
TLSH
T18E193328E68A4E77D17F303240A749D0159BAC1D8EC65ADB11C0BD3F2EA4567D32B8F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

cc:97:10:c3:41:8c:57:7c:aa:05:12:75:55:1d:19:09:b8:af:76:75:5a:96:a5:72:3c:12:aa:d9:f5:2d:bb:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Dec 24, 2022

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2022 - May 1, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

163472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AdobeSelfExtractor.pdb

kernel32

TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalAlloc LocalReAlloc GetCurrentDirectoryW GetLocaleInfoW GetSystemDefaultUILanguage GlobalFlags GetFileAttributesExW GetFileSizeEx GetFileTime SetErrorMode VirtualProtect GetSystemInfo VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime FileTimeToSystemTime IsDebuggerPresent GetStartupInfoW GetStringTypeW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP GetTimeZoneInformation LCMapStringW ExitProcess GetStdHandle HeapQueryInformation GetFileType SetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread SetEnvironmentVariableW GetDriveTypeW GetCommandLineA RtlUnwind OutputDebugStringW SystemTimeToTzSpecificLocalTime FindNextFileW FileTimeToLocalFileTime CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer GetCurrentProcessId GlobalAddAtomW WritePrivateProfileStringW GetPrivateProfileIntW ResumeThread SuspendThread SetThreadPriority InitializeCriticalSection LoadLibraryA GetCurrentProcess DuplicateHandle UnlockFile SetEndOfFile LockFile GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose lstrcmpW lstrcmpA GlobalDeleteAtom LoadLibraryExW FreeLibrary GetCurrentThreadId GetCurrentThread MulDiv GlobalFree GlobalLock GlobalUnlock GlobalAlloc LoadLibraryW GetModuleHandleA GetModuleFileNameW InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection OutputDebugStringA GetACP lstrlenW GetVolumeInformationW WideCharToMultiByte CreateThread GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc HeapSize InitializeCriticalSectionEx SetFileTime HeapFree CreateDirectoryW SetLastError MoveFileW GetUserDefaultUILanguage RemoveDirectoryW SetFileAttributesW GetExitCodeProcess CreateProcessW ExpandEnvironmentStringsW GetPrivateProfileStringW SetEvent Sleep WaitForSingleObject ResetEvent CreateEventW GlobalMemoryStatusEx GetEnvironmentVariableW GetVersionExW GetTempPathW DeleteFileW GetCommandLineW LocalFree FormatMessageW MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource GetFileAttributesW GetFileSize CloseHandle GetLastError CreateFileW SetFilePointer WriteConsoleW WriteFile ReadFile SetDllDirectoryW GetSystemWindowsDirectoryW GetModuleHandleW GetProcAddress InitializeSListHead SetCurrentDirectoryW

user32

RedrawWindow SetForegroundWindow GetForegroundWindow UpdateWindow SetMenu GetMenu GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW GetSysColor ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW UnhookWindowsHookEx GetDesktopWindow SetActiveWindow EndDialog CreateDialogIndirectParamW DestroyWindow GetLastActivePopup GetWindowThreadProcessId SetCursor LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem CallNextHookEx SetWindowsHookExW GetSysColorBrush ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW CharUpperW IsDialogMessageW GetWindow SetWindowLongW GetWindowLongW GetWindowTextW IsWindowEnabled GetFocus SetFocus GetDlgCtrlID GetScrollPos SetPropW GetPropW RemovePropW GetWindowRect AdjustWindowRectEx MapWindowPoints CopyRect PtInRect GetClassLongW GetClassNameW GetTopWindow WinHelpW MonitorFromWindow GetNextDlgTabItem MessageBoxW GetSystemMetrics PostMessageW LoadIconW SendMessageW IsIconic GetClientRect DrawIcon IsWindow EnableWindow UnregisterClassW GetDlgItem SetWindowTextW FindWindowW SendDlgItemMessageA SetRectEmpty OffsetRect GetParent GetSubMenu GetMenuItemID GetMenuItemCount PostQuitMessage ShowWindow SetWindowPos GetMonitorInfoW LoadCursorW DestroyMenu InvalidateRect KillTimer SetTimer RealChildWindowFromPoint GetCursorPos

gdi32

GetClipBox GetStockObject PtVisible RectVisible RestoreDC SaveDC SelectObject SetBkColor SetMapMode SetTextColor TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx Escape DeleteObject CreateBitmap GetDeviceCaps DeleteDC GetObjectW CreateFontIndirectW

advapi32

RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegFlushKey RegCreateKeyW RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHGetMalloc ord165 SHGetFolderPathW SHGetKnownFolderPath ShellExecuteW SHBrowseForFolderW

shlwapi

PathStripToRootW PathFindFileNameW PathIsUNCW PathFindExtensionW

ole32

CoCreateGuid CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize

oleaut32

VariantChangeType VariantClear VariantInit SysAllocString SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

AcroRdrDCx642200320310_en_US.exe

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

oleaut32

generic