WIN_STB-5[.]4[.]442[.]0[.]exe_PROD[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
WIN_STB-5.4.442.0.exe_PROD.exe
Size 93.8MB
Sample260930-ecpvzazzbw
SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
MD5 55adbe3c1a3d8a802c028999886cdffa
SHA1 b23a567adb04a8a02382ddf51ae40543fb7e12f9
SHA512 ea24edb4f1030be9318a38365a2d59aebc4fc59de166aee923a8a51b98626373b91449b113bd895f433e10f8edd488f8b2842733519c14579a02cbcc94e0bb15
SSDEEP 1572864:pkk8J9sw2fJEYpZ3dD0GJ1AxM//hMH1mlup4xROGj0A3uS6RziqBJL7zNcDapAvR:+19sTJEydD001phDuifgHRzD7aQAv2uW
TLSH
T147283323A661203EE2B205354D6F9D3181563D336AB59146F266FF292EF08D2BC1BF17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

WIN_STB-5.4.442.0.exe_PROD.exe

.exe 93.8MB

WIN_STB-5.4.442.0.exe_PROD.exe

IMPHASH a201a3d6fa5f43a92c0c343738837cf1
SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
MD5 55adbe3c1a3d8a802c028999886cdffa
SHA1 b23a567adb04a8a02382ddf51ae40543fb7e12f9
SHA512 ea24edb4f1030be9318a38365a2d59aebc4fc59de166aee923a8a51b98626373b91449b113bd895f433e10f8edd488f8b2842733519c14579a02cbcc94e0bb15
SSDEEP 1572864:pkk8J9sw2fJEYpZ3dD0GJ1AxM//hMH1mlup4xROGj0A3uS6RziqBJL7zNcDapAvR:+19sTJEydD001phDuifgHRzD7aQAv2uW
TLSH
T147283323A661203EE2B205354D6F9D3181563D336AB59146F266FF292EF08D2BC1BF17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

e5:88:a3:50:a8:38:98:73:89:55:4b:1e:57:b3:4c:b6:fe:c7:81:06:9f:93:da:ef:40:52:72:da:c4:c7:87:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,O=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,L=Boston,ST=Massachusetts,C=US

Chains

Feb 4, 2025

CN=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,O=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,L=Boston,ST=Massachusetts,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,O=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,L=Boston,ST=Massachusetts,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,O=HOUGHTON MIFFLIN HARCOURT PUBLISHING COMPANY,L=Boston,ST=Massachusetts,C=US

Serial Number

01:69:59:f9:4f:51:e9:26:69:b3:1f:40:c4:cf:82:ba

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 17, 2024 - May 8, 2025

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

361754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\setupPreReq.pdb

comctl32

ord17

kernel32

GetVersion GetLocalTime GetFileAttributesW GetCurrentDirectoryW FileTimeToLocalFileTime GetFileTime GetSystemDefaultUILanguage GlobalAlloc GlobalFree FlushFileBuffers VirtualQuery IsBadReadPtr GetDiskFreeSpaceExW GetDriveTypeW GetCurrentProcess GetCurrentThread InterlockedExchange LoadLibraryExA GetModuleHandleW GetProcAddress GetSystemDirectoryA LoadLibraryA GetLastError SetLastError CreateFileW GetFileSize CloseHandle CreateFileMappingW LoadLibraryExW UnmapViewOfFile lstrlenA MultiByteToWideChar WideCharToMultiByte ReadFile SetFilePointer WriteFile HeapAlloc DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection RaiseException MulDiv GetSystemInfo MoveFileW GetPrivateProfileStringW GetSystemTimeAsFileTime SetFileAttributesW FindNextFileW FindFirstFileW FindClose CreateDirectoryW CompareFileTime SetCurrentDirectoryW VerLanguageNameW GetUserDefaultLangID GetSystemDefaultLangID FreeResource lstrcmpA SystemTimeToFileTime ResetEvent SetEvent FindResourceExW SetFileTime OpenProcess GetProcessTimes ReadConsoleW WriteConsoleW SetStdHandle SetFilePointerEx lstrcmpiW lstrcmpW IsValidLocale GetLocaleInfoW lstrcpyA ExitThread GetExitCodeProcess WaitForSingleObject GetCommandLineW LoadLibraryW FreeLibrary CompareStringA CompareStringW lstrcatW GetVersionExW CreateEventW QueryPerformanceFrequency GetTempFileNameW CopyFileW GetTickCount GetExitCodeThread CreateThread FindResourceW MapViewOfFile GlobalUnlock GlobalLock SizeofResource LockResource LoadResource lstrcpyW SetErrorMode GetTempPathW ExpandEnvironmentStringsW FormatMessageW LocalFree GetWindowsDirectoryW GetSystemDirectoryW CreateProcessW InterlockedDecrement InterlockedIncrement Sleep RemoveDirectoryW DeleteFileW lstrlenW lstrcpynW GetModuleFileNameW GetProcessHeap HeapFree GetConsoleMode GetConsoleCP GetTimeFormatW GetDateFormatW OutputDebugStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetFileType HeapReAlloc GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCurrentThreadId HeapSize GetModuleHandleExW ExitProcess GetStdHandle GetFullPathNameW IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind LCMapStringW DecodePointer EncodePointer

user32

SetWindowPos SetWindowTextW GetMessageW TranslateMessage DispatchMessageW GetDlgItem EndDialog DialogBoxIndirectParamW ShowWindow GetDesktopWindow MsgWaitForMultipleObjects PeekMessageW PostMessageW DefWindowProcW wsprintfW LoadIconW LoadCursorW KillTimer SetTimer CreateWindowExW RegisterClassW FillRect CharPrevW wvsprintfW LoadImageW CreateDialogParamW MoveWindow GetParent GetWindowTextW SetCursor GetWindow GetDlgItemTextW SetFocus SetForegroundWindow SetActiveWindow SetDlgItemTextW FindWindowW SubtractRect IntersectRect SetRect GetWindowDC GetSysColorBrush GetSysColor GetDC GetSystemMetrics GetDlgCtrlID ExitWindowsEx CharUpperW wsprintfA CallWindowProcW DrawIcon DrawTextW UpdateWindow InvalidateRect SetPropW GetPropW RemovePropW MapWindowPoints DrawFocusRect CopyRect InflateRect EnumChildWindows GetClassNameW MapDialogRect RegisterClassExW MonitorFromPoint CreateDialogIndirectParamW CharNextW IsDialogMessageW FindWindowExW ScreenToClient MessageBoxW GetWindowRect EnableWindow SendDlgItemMessageW DestroyWindow IsWindow SendMessageW WaitForInputIdle SetWindowLongW GetWindowLongW GetClientRect EndPaint BeginPaint ReleaseDC PostQuitMessage

gdi32

CreateHalftonePalette GetDIBColorTable SelectPalette RealizePalette GetSystemPaletteEntries CreatePalette CreateFontW SetTextColor SetBkMode GetDeviceCaps CreateSolidBrush GetObjectW TranslateCharsetInfo CreateFontIndirectW SetStretchBltMode StretchBlt SelectObject DeleteDC CreateDIBitmap CreateCompatibleDC BitBlt DeleteObject GetStockObject CreateCompatibleBitmap CreateDCW CreatePatternBrush GetTextExtentPoint32W RestoreDC SaveDC DeleteMetaFile CreateBitmap CreateRectRgn PatBlt PlayMetaFile SelectClipRgn SetBkColor SetMapMode SetMetaFileBitsEx SetPixel SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx UnrealizeObject

advapi32

CreateWellKnownSid RegOpenKeyExW RegOpenKeyW RegOverridePredefKey LookupPrivilegeValueW AdjustTokenPrivileges GetTokenInformation FreeSid EqualSid AllocateAndInitializeSid OpenThreadToken OpenProcessToken SetEntriesInAclW SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExW RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyW RegEnumValueW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

CommandLineToArgvW ShellExecuteExW SHBrowseForFolderW SHGetFolderPathW SHGetPathFromIDListW SHGetMalloc ShellExecuteW

ole32

CoCreateInstance CoCreateGuid CreateStreamOnHGlobal CLSIDFromProgID CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoUninitialize CoInitializeSecurity CoInitialize

oleaut32

VariantClear SysStringByteLen SysAllocStringByteLen VarBstrCat VarBstrFromDate VariantChangeType GetErrorInfo VarUI4FromStr SystemTimeToVariantTime LoadTypeLi RegisterTypeLi UnRegisterTypeLi VarBstrCmp SysAllocStringLen SysFreeString SysAllocString SysStringLen SysReAllocStringLen

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW UuidCreate UuidToStringW

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromResource GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdipGetImageHeight GdipGetImageWidth

Sharing

General

Malware Config

Signatures

File Explorer

WIN_STB-5.4.442.0.exe_PROD.exe

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

rpcrt4

gdiplus

generic