[Guru3D]-DDU.zip
- SHA256 206587ae822e776f199402acacdff651e59af85bdb8a3322ea6de9343a9630e0
Static task
static1
General
- Target [Guru3D]-DDU.zip
- Size 1.2MB
- Sample261027-bbrrdsxv5k
- SHA256 206587ae822e776f199402acacdff651e59af85bdb8a3322ea6de9343a9630e0
- MD5 c27fc4cdbae1064f7eb38c21a2866874
- SHA1 3d8a30c813c790bbe3cc8fdc7bdde0ffc1b215ab
- SHA512 fafa29c51da550ed64c08fabb9ad0c7a185f40a71292c68b5615de620b220fc7af05bbdf452ef66741deffc7184b63d227008cc153e44fd6fb084439f64f8f11
- SSDEEP 24576:3fvoeV5f3rUtZvWGtXm5tCW4eGxzUKQqQkYNF/HDJz52Q+PV0BizkhGr:3hV5vr+ZuGiCW4HxQzqQlNFPDzgdaakg
- TLSH T1ED5533A8B6705EDBB0D19FF072A8EC97917D037ED0E011DE72A8532DD48D09B25D3AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
[Guru3D]-DDU.zip.zip 1.2MB
-
DDU v18.1.6.2.exe.exe 1.3MB
-
Guru3D/downloaded_from_www.guru3d.com.txt52B
-
Guru3D/guru3d.url.url 151B
-
downloaded_from_www.guru3d.com.txt40KB
DDU v18.1.6.2.exe
- IMPHASH eb0cbb54ca401e820f6974e6548a4451
- SHA256 932dc1423a077616f4cae5a8ad973eb7f16f2a09b749a0c78eed0e8e0f8ccebd
- MD5 47e384b6e7eb279a7f2d32c628a83f92
- SHA1 c36ac054f21c0ed75a3891a69aa022e3a84f5fdd
- SHA512 a2f10e178c6041b09259054e04adbfc982bc9945293fa627acdabb2feed485ac67eb91b5743e64219c46bca7c5a39c17db5d224755219f11f865f708573c1f47
- SSDEEP 24576:nHcdVM95EKUp+J5kYHrf9r09XNGGt5Q59CC4oCZ9U2QeQmONh/HZbzn0QavVwxiW:2VMoxcJ7Hr1ruXYGsCC4XZ63eQ5NhPZ1
- TLSH T1F855232137F1C8B7D592153099ECAFF6A1F9931D4F2044C763C48B2DAE388E6D236669
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
31:c7:80:82:ca:50:02:33:94:41:6e:76:fd:80:bd:c8:e3:e3:58:24:08:28:1c:d2:df:c3:c1:38:9c:e5:96:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA
Chains
Oct 21, 2026
CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA
Serial Number
04:2e:ff:54:cd:ea:d1:ac:36:09:e2:b5:c9:9a:fa:3f
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2026 - Aug 13, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
165644
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
oleaut32
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
SysStringLen
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
OleInitialize
user32
CheckDlgButton
IsDlgButtonChecked
DestroyIcon
EndDialog
SetDlgItemTextW
GetFocus
SetFocus
GetKeyState
InvalidateRect
SetWindowTextW
EnableWindow
PostMessageW
MessageBoxW
DialogBoxParamW
SetWindowLongW
SetTimer
GetParent
ShowWindow
MoveWindow
ScreenToClient
GetDlgItem
GetWindowRect
MapDialogRect
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
SendMessageW
LoadStringW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharUpperW
LoadIconW
SetCursor
LoadCursorW
KillTimer
GetWindowLongW
shell32
SHBrowseForFolderW
SHGetFileInfoW
SHGetPathFromIDListW
msvcrt
memset
strlen
_beginthreadex
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcsstr
free
malloc
memcpy
memmove
_purecall
memcmp
_CxxThrowException
__CxxFrameHandler
wcscmp
kernel32
GetStartupInfoA
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
GetVersion
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
SetPriorityClass
WaitForMultipleObjects
DeleteCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
GetModuleHandleW
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GlobalFree
GlobalAlloc
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
GetFileAttributesW
GetModuleHandleA
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
GetStdHandle
GetFileInformationByHandle
GetTickCount
GetCurrentDirectoryW
SetLastError
DeleteFileW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
SetFileAttributesW
CreateFileW
SetFileTime
CloseHandle
GetSystemDirectoryW
FormatMessageW
GetModuleFileNameW
LoadLibraryExW
GlobalLock
GlobalUnlock
MultiByteToWideChar
GetLastError
GetCommandLineW
GetVersionExW
LocalFree
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=95, version=2190,
count=183, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=92, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=15, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=260, version=35228,
count=3, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Guru3D/downloaded_from_www.guru3d.com.txt
- SHA256 652049e848c7b9cab308470a21f75fb068bf4e1e189fda09385e1ed5bd0237ec
- MD5 974220e172c502b31ed3053836da0d84
- SHA1 d25dc6bcb8e1967591cd4122f5e652e5abe9b237
- SHA512 4cc003dfcb38d6bef62f9d6ce8e8a7ede8f8e09078c3fbb4dc17dfaf897cc840568fb241d6b564434de98488c3636e5f5174c93da07bfa5c82686862ffaa6a30
- TLSH T1559002BF149B85400114C280521D5616843741195580C393A4114A0D60E1518A2528E3
- MD5 SHA1 SHA512 TLSH
Guru3D/guru3d.url
- SHA256 c8fa68e5208b87dea45a7bd6c4cf292e902784c219225290e85f4b512b440e60
- MD5 5fdcce21b2c535505434ae25a861448f
- SHA1 44f8c3723dccdabff54a51f42d11a90232038652
- SHA512 db51fac5f67e141f040c9bd302edcff41a79e993b0c75f34902ee9842871c893d90aea4fb35ef8afc83c16fa136e6980a0c41b7c337da42cfbd9fd1a1b765b72
- TLSH T1FDC09BAB8D0CD5958B47648D5836D95DEC4770DCCCDBC4CCD645C7560DD702B14D6100
- MD5 SHA1 SHA512 TLSH
downloaded_from_www.guru3d.com.txt
- SHA256 9cd4355474d05b039bcf8617141791364748c415891969ba49c756cbef326ffc
- MD5 487d479444e63372d89e868d26e36668
- SHA1 b31c0ac6204d24c0b4f0a2e09e154d502004a002
- SHA512 2a2ab1a8cc44514fd55d8330a2b98dbe4410057847d84e4a34818bf157e77116c2b26cb1d1e9d4c6f13ef5b00e46b97d7313bf120a8869eff31f35ece794f747
- SSDEEP 384:sFQypEPEsnuxqgSZ+RKgwkZCsz2H1jdqsP:sFQKEPEsCSZvBqCZgsP
- TLSH T17E03B51EFA91D1441EFBA4FDAC256401B46F5AAD41F0DC2B3C7E9A8617D27F2918B082
- MD5 SHA1 SHA512 SSDEEP TLSH