VBCABLE_Setup_x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VBCABLE_Setup_x64.exe
Size 915KB
Sample261102-plt66afa95
SHA256 734c35dfa6d98f48782a451633ceb471166ec70d60482fd89a1123d0ee3c4f41
MD5 fd3ec8b4d075d879af81caee8f216724
SHA1 3f6e53cef29dc30df588def8abd83cc052ededef
SHA512 816c2fe66a0333ed92d9edb3d67e852b11999e24d0e001a158c9ea46a0bc3b08858929693d6beb4cf3f91d085dfc19c0f1970f3d8bb1c959f3e378fbf0b8da7c
SSDEEP 12288:XmBbJrhTZUI6HKhgS9APmGKRH8MYmmBHBw:Xm9rhTZ36HKhx9AP0RH8MYDBHBw
TLSH
T16F15D8E531623A03C9DC45369918BBFDB9C41C44D625FA74A93BB90C103A7D0B93A7EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

VBCABLE_Setup_x64.exe

.exe 915KB

VBCABLE_Setup_x64.exe

IMPHASH 48be7f69c9d99d07622010849397921d
SHA256 734c35dfa6d98f48782a451633ceb471166ec70d60482fd89a1123d0ee3c4f41
MD5 fd3ec8b4d075d879af81caee8f216724
SHA1 3f6e53cef29dc30df588def8abd83cc052ededef
SHA512 816c2fe66a0333ed92d9edb3d67e852b11999e24d0e001a158c9ea46a0bc3b08858929693d6beb4cf3f91d085dfc19c0f1970f3d8bb1c959f3e378fbf0b8da7c
SSDEEP 12288:XmBbJrhTZUI6HKhgS9APmGKRH8MYmmBHBw:Xm9rhTZ36HKhx9AP0RH8MYDBHBw
TLSH
T16F15D8E531623A03C9DC45369918BBFDB9C41C44D625FA74A93BB90C103A7D0B93A7EB
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

68:12:03:2f:03:53:e1:13:dd:7b:7b:6d:58:5c:2d:a5:12:59:b3:79:8b:36:7b:dc:0e:33:81:44:2a:c0:db:37

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 30, 2024

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

52:e1:40:c4:04:1a:07:b9:5a:12:4e:22

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 3, 2023 - Jun 21, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 7, 2023 - Dec 9, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

28732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

H:\Travaux\VB_VAC\Installer\VBVAC_Setup_vc2010\x64\Release\VBCABLE_Setup_x64.pdb

setupapi

SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces

kernel32

FreeLibrary GetWindowsDirectoryA GetProcAddress LoadLibraryA GetModuleHandleA GetVersionExA GetCurrentProcessId WaitForSingleObject DeviceIoControl GetSystemDirectoryA CopyFileA SetFileAttributesA GetModuleFileNameA CreateMutexA ReleaseMutex GetConsoleCP GetStringTypeW LCMapStringW LoadLibraryW EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime QueryPerformanceCounter DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwindEx FlsAlloc GetCurrentThreadId SetLastError FlsFree GetTickCount MultiByteToWideChar WideCharToMultiByte DeleteFileA CloseHandle FlushFileBuffers FindNextFileA FindClose RemoveDirectoryA FindFirstFileA CreateDirectoryA CreateFileW WriteFile SetFilePointer CreateFileA GetLastError Sleep GetCurrentProcess GetConsoleMode HeapSize SetStdHandle WriteConsoleW FlsSetValue FlsGetValue IsValidCodePage GetOEMCP GetACP GetCPInfo HeapFree HeapAlloc HeapReAlloc GetCommandLineA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate GetModuleHandleW ExitProcess DecodePointer GetStdHandle GetModuleFileNameW EncodePointer

user32

EndPaint SetCursor GetMessageA PostQuitMessage LoadBitmapA LoadIconA BeginPaint DrawTextA TranslateMessage MessageBoxA CreateWindowExA ReleaseDC DefWindowProcA SetWindowPos ShowWindow PostMessageA DispatchMessageA SystemParametersInfoA GetSystemMetrics UpdateWindow LoadCursorA RegisterClassA GetDC

gdi32

BitBlt SetTextColor DeleteDC CreateFontIndirectA SetBkMode SelectObject CreateCompatibleDC Rectangle RoundRect GetObjectA GetStockObject DeleteObject

advapi32

RegEnumKeyA RegEnumKeyExA RegDeleteKeyA RegSetValueExW RegOpenKeyA RegOpenKeyExW RegCreateKeyExA RegCreateKeyA RegOpenKeyW RegQueryValueExW RegCreateKeyExW RegSetValueExA RegEnumKeyW RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

VBCABLE_Setup_x64.exe

setupapi

kernel32

user32

gdi32

advapi32

shell32

generic