baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3

General

Target
baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3
Size 358KB
Sample260927-mtp63awaph
SHA256 baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3
MD5 c1ec14e50f781037566fac2200194443
SHA1 c4c1bba1842702fb6eeb199fa52093f12aa5a1c9
SHA512 504d9f5480bf10cf755f2a2623db1ff0eb2ff583a612a2281eb688cdff11ee41b642621883929e06ada656a1ae0b7cfdafaa2a921360b34858e3ddf9898eca5c
SSDEEP 6144:K2qwy58OQG2ZGB6fN0Qaw4UMzbBV+UdvrEFp7hKwFo:M58OQGdeN1anUsbBjvrEH7JFo
TLSH
T1FA749C117580C3B4E4BB0672623CA61546FDB93A0BAAD5D7E7C80C4D4A3E9C2B736B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3

File Explorer

baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3

.dll 358KB

baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3

IMPHASH 18ff940622596a6ede9ac2367c85bcf0
SHA256 baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3
MD5 c1ec14e50f781037566fac2200194443
SHA1 c4c1bba1842702fb6eeb199fa52093f12aa5a1c9
SHA512 504d9f5480bf10cf755f2a2623db1ff0eb2ff583a612a2281eb688cdff11ee41b642621883929e06ada656a1ae0b7cfdafaa2a921360b34858e3ddf9898eca5c
SSDEEP 6144:K2qwy58OQG2ZGB6fN0Qaw4UMzbBV+UdvrEFp7hKwFo:M58OQGdeN1anUsbBjvrEH7JFo
TLSH
T1FA749C117580C3B4E4BB0672623CA61546FDB93A0BAAD5D7E7C80C4D4A3E9C2B736B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

fd:d6:89:75:6b:f7:9b:2c:01:83:7a:a9:07:3c:5b:b5:47:5c:99:56

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=北京小米智能科技有限公司,O=北京小米智能科技有限公司,ST=北京市,C=CN

Chains

Jun 8, 2022

CN=北京小米智能科技有限公司,O=北京小米智能科技有限公司,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Serial Number

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 29, 2022 - Mar 14, 2033

Subject

CN=北京小米智能科技有限公司,O=北京小米智能科技有限公司,ST=北京市,C=CN

Serial Number

01:81:b0:b1:b8:13:7e:6d:f2:15:d5:0b:79:71:96:fd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 9, 2021 - Jul 17, 2024

Minor OS version

1

Major OS version

5

Entry point

61746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\jenkins\build\workspace\miflash_git\out\Release\bin\SLA_Challenge.pdb

kernel32

GetLastError FormatMessageA LocalFree GetModuleFileNameA CreateFileW Sleep ReadFile CloseHandle WriteFile CreateProcessW CreateToolhelp32Snapshot Process32FirstW Process32NextW OpenProcess GetModuleFileNameW WaitForMultipleObjects CreateEventW CreateMutexW WaitForSingleObject ReleaseMutex SetEnvironmentVariableA SetEndOfFile HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent RaiseException GetProcessHeap IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThread MultiByteToWideChar RtlUnwind SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI WideCharToMultiByte FatalAppExitA HeapSize GetTimeZoneInformation GetConsoleCP FlushFileBuffers QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetStdHandle SetConsoleCtrlHandler FreeLibrary LoadLibraryExW OutputDebugStringW HeapReAlloc WriteConsoleW CreateDirectoryW

shell32

SHGetSpecialFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

baa3d53f6afa9dc05d91b629deeeb9a952c0cdecaeca451d39ff7ccfecad4cb3

PE Signature issue

kernel32

shell32

generic