General

  • Target
    BorderlessGaming9.6_admin_setup.exe
  • Size 2.2MB
  • Sample261002-tk2l3adg69
  • SHA256 f8026c1b7e78c80e8e85ddbbfe96f76cae6fc0bf3d09fb06a85c68aefadc8a6a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • BorderlessGaming9.6_admin_setup.exe
    .exe 2.2MB

BorderlessGaming9.6_admin_setup.exe

  • IMPHASH e8ac1646024d52d1534a88da2e8037cd
  • SHA256 f8026c1b7e78c80e8e85ddbbfe96f76cae6fc0bf3d09fb06a85c68aefadc8a6a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

PE Signature issue

Digest
36:fc:2a:0d:32:b4:83:65:5c:b6:18:d6:de:51:04:e0:65:27:87:87:0e:3e:bf:8d:ad:7e:42:d4:cf:9b:0b:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=7452486,CN=Viorae\, Inc.,O=Viorae\, Inc.,L=New York City,ST=New York,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
6
Entry point
720936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths