directx_Jun2010_redist[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
directx_Jun2010_redist.exe
Size 95.6MB
Sample261030-b5zzvsvx7j
SHA256 053f76dcbb28802e23341b6a787e3b0791c0fa5c8d4d011b1044172dbf89c73b
MD5 822e4c516600e81dc7fb16d9a77ec6d4
SHA1 7e5d2e5e1a13fbc47f990cc55cbdb428cd12f759
SHA512 04c6347e6db6cff037a1292a88bf062c3e4042fb265a665afdbe7616aed7936f4955a35637a86c30332731762e0052b6f5c721f9fe7682d147e0965a7fb77a63
SSDEEP 1572864:LeKHwu9mdcsB10CvInhZfiuM3Or17hWocUW1o6vSxfcBLuGgf3FmVOUxXBKYSJTw:fwuAdf0CvIjfiu62hgUW1bSxkQGgPb0p
TLSH
T1622833B3F7708603F9E50F371021965C15E2BC4A18FA96C5B6A9F61BACF97CA2530718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

directx_Jun2010_redist.exe

.exe 95.6MB

directx_Jun2010_redist.exe

IMPHASH 3a2e47f2192ee653cedbe5370d5bcce1
SHA256 053f76dcbb28802e23341b6a787e3b0791c0fa5c8d4d011b1044172dbf89c73b
MD5 822e4c516600e81dc7fb16d9a77ec6d4
SHA1 7e5d2e5e1a13fbc47f990cc55cbdb428cd12f759
SHA512 04c6347e6db6cff037a1292a88bf062c3e4042fb265a665afdbe7616aed7936f4955a35637a86c30332731762e0052b6f5c721f9fe7682d147e0965a7fb77a63
SSDEEP 1572864:LeKHwu9mdcsB10CvInhZfiuM3Or17hWocUW1o6vSxfcBLuGgf3FmVOUxXBKYSJTw:fwuAdf0CvIjfiu62hgUW1bSxkQGgPb0p
TLSH
T1622833B3F7708603F9E50F371021965C15E2BC4A18FA96C5B6A9F61BACF97CA2530718
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

4a:93:17:cd:9f:1a:f1:8a:97:43:8d:88:82:4c:91:62:af:9c:38:9a:ba:85:14:75:5b:26:b6:f6:99:2b:17:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 17, 2021

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

Major OS version

Entry point

27458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA GetModuleFileNameA GetSystemDirectoryA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA ExpandEnvironmentStringsA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA CompareStringA GetVersion GetModuleHandleW FreeResource LockResource LoadResource SizeofResource CloseHandle ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA SetCurrentDirectoryA GetTempFileNameA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA ExitProcess LoadLibraryExA GetVersionExA GetExitCodeProcess GetProcAddress CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA FindResourceA LoadLibraryA FreeLibrary InterlockedExchange Sleep InterlockedCompareExchange GetStartupInfoA OutputDebugStringA RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA WaitForSingleObject

gdi32

GetDeviceCaps

user32

SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA GetDC ReleaseDC SetWindowPos SendMessageA PeekMessageA MsgWaitForMultipleObjects DispatchMessageA CallWindowProcA GetWindowLongA SetWindowLongA CharPrevA CharUpperA CharNextA ExitWindowsEx EndDialog GetDesktopWindow LoadStringA SetDlgItemTextA MessageBeep GetWindowRect GetSystemMetrics

msvcrt

_cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp __getmainargs _errno memcpy memset _vsnprintf

comctl32

ord17

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA