SAP2000v2710Build3560Setup[.]exe

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target
SAP2000v2710Build3560Setup.exe
Size 1136.9MB
Sample261110-pmjrtafd39
SHA256 ef0525eef5ad41a057d3b8de84c9c6e0576f8e6a81ccf7e4760c53682558007d
MD5 39ebdbb09481f2c437a67b835b81a6eb
SHA1 4fae75680f422e5dcd9a630da356c408a058340f
SHA512 c71695edf3457b0702c669b5c405a21a680f029e2b74c2f96f4e923601d7e9a8489449ba3852070dc61c126e56433ab9cf38d64fe32c65cd8bb6e72e6c436357
SSDEEP 25165824:sdr5i7up6+c3CYnCy1YbJFusiISCPHbyzHx6eHNF5XnVC:sdrYa7qCMCy1gJUKvAtJ3VC
TLSH
T14BC9332EB4E7C07DE16805704C8D0E610EAC3DA3371B5AE57526FF580CE9A94F7932A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SAP2000v2710Build3560Setup.exe

.exe 1136.9MB

SAP2000v2710Build3560Setup.exe

IMPHASH b9064e0afb94ddc9d7cfc6948451b865
SHA256 ef0525eef5ad41a057d3b8de84c9c6e0576f8e6a81ccf7e4760c53682558007d
MD5 39ebdbb09481f2c437a67b835b81a6eb
SHA1 4fae75680f422e5dcd9a630da356c408a058340f
SHA512 c71695edf3457b0702c669b5c405a21a680f029e2b74c2f96f4e923601d7e9a8489449ba3852070dc61c126e56433ab9cf38d64fe32c65cd8bb6e72e6c436357
SSDEEP 25165824:sdr5i7up6+c3CYnCy1YbJFusiISCPHbyzHx6eHNF5XnVC:sdrYa7qCMCy1gJUKvAtJ3VC
TLSH
T14BC9332EB4E7C07DE16805704C8D0E610EAC3DA3371B5AE57526FF580CE9A94F7932A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

ec:ac:f6:88:65:30:a3:10:ba:69:32:a5:83:6d:ea:1d:15:f0:05:e6:f7:cf:20:c6:39:ec:71:8e:2a:91:74:8f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Computers and Structures\, Inc.,O=Computers and Structures\, Inc.,L=Walnut Creek,ST=California,C=US

Chains

Mar 18, 2026

CN=Computers and Structures\, Inc.,O=Computers and Structures\, Inc.,L=Walnut Creek,ST=California,C=US

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=Computers and Structures\, Inc.,O=Computers and Structures\, Inc.,L=Walnut Creek,ST=California,C=US

Serial Number

33:00:07:74:21:29:57:96:22:4d:ae:14:c6:00:00:00:07:74:21

Issuer

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 18, 2026 - Mar 21, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2021 - Apr 13, 2026

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

Major OS version

Entry point

375424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\redist\Language Independent\i386\setupPreReq.pdb

comctl32

ord17

kernel32

GetFileAttributesW ReleaseMutex CreateMutexW SetCurrentDirectoryW GetCurrentDirectoryW FileTimeToLocalFileTime GetFileTime GetSystemDefaultUILanguage GlobalAlloc GlobalFree DecodePointer FlushFileBuffers VirtualQuery IsBadReadPtr GetDiskFreeSpaceExW GetDriveTypeW GetCurrentProcess GetCurrentThread VirtualProtect LoadLibraryExA SetEnvironmentVariableW GetModuleHandleW GetProcAddress GetSystemDirectoryA LoadLibraryA GetLastError SetLastError CreateFileW GetFileSize CloseHandle GetLocalTime MapViewOfFile UnmapViewOfFile lstrlenA MultiByteToWideChar WideCharToMultiByte ReadFile SetFilePointer WriteFile GetVersion LoadLibraryExW DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection RaiseException MulDiv GetSystemInfo MoveFileW GetPrivateProfileStringW GetSystemTimeAsFileTime SetFileAttributesW FindNextFileW FindFirstFileW FindClose CreateDirectoryW CompareFileTime VerLanguageNameW GetUserDefaultLangID WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW LCMapStringW HeapReAlloc HeapSize GetStringTypeW GetFileType GetACP GetSystemDefaultLangID lstrcmpiW lstrcmpW IsValidLocale GetLocaleInfoW lstrcpyA ExitThread GetExitCodeProcess WaitForSingleObject GetCommandLineW LoadLibraryW FreeLibrary CompareStringA CompareStringW lstrcatW GetVersionExW CreateEventW QueryPerformanceFrequency GetTempFileNameW CopyFileW GetTickCount GetExitCodeThread CreateThread CreateFileMappingW FindResourceW GlobalUnlock GlobalLock SizeofResource LockResource LoadResource lstrcpyW SetErrorMode GetTempPathW ExpandEnvironmentStringsW FormatMessageW LocalFree GetWindowsDirectoryW GetSystemDirectoryW CreateProcessW Sleep RemoveDirectoryW DeleteFileW lstrlenW lstrcpynW GetModuleFileNameW GetProcessHeap HeapFree HeapAlloc GetStdHandle GetModuleHandleExW ExitProcess GetFullPathNameW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RtlUnwind InitializeCriticalSectionEx FreeResource LocalAlloc SystemTimeToFileTime lstrcmpA ResetEvent SetEvent GetTimeFormatW GetDateFormatW FindResourceExW OpenProcess GetProcessTimes SetFileTime InitializeSListHead GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive OutputDebugStringW IsDebuggerPresent

user32

SetWindowTextW GetDlgItem GetMessageW TranslateMessage EndDialog SetWindowPos GetWindowDC ShowWindow GetDesktopWindow MsgWaitForMultipleObjects DispatchMessageW PostMessageW DefWindowProcW PostQuitMessage RegisterClassW DialogBoxIndirectParamW PeekMessageW wsprintfW LoadIconW LoadCursorW KillTimer SetTimer SetRect ReleaseDC CharPrevW wvsprintfW LoadImageW CreateDialogParamW MoveWindow GetParent GetWindowTextW SetCursor GetWindow GetDlgItemTextW SetFocus SetForegroundWindow SetActiveWindow SetDlgItemTextW FindWindowW SubtractRect IntersectRect BeginPaint FillRect GetSysColorBrush GetSysColor GetDC GetSystemMetrics GetDlgCtrlID CreateDialogIndirectParamW ExitWindowsEx CharUpperW wsprintfA CallWindowProcW DrawIcon DrawTextW UpdateWindow InvalidateRect SetPropW GetPropW RemovePropW MapWindowPoints DrawFocusRect CopyRect InflateRect EnumChildWindows GetClassNameW MapDialogRect RegisterClassExW MonitorFromPoint CharNextW IsDialogMessageW FindWindowExW ScreenToClient MessageBoxW GetWindowRect EnableWindow SendDlgItemMessageW DestroyWindow IsWindow SendMessageW WaitForInputIdle SetWindowLongW GetWindowLongW GetClientRect EndPaint CreateWindowExW

gdi32

CreateHalftonePalette GetDIBColorTable SelectPalette RealizePalette GetSystemPaletteEntries CreatePalette CreateFontW SetTextColor SetBkMode GetDeviceCaps CreateSolidBrush GetObjectW TranslateCharsetInfo CreateFontIndirectW SetStretchBltMode StretchBlt SelectObject DeleteDC CreateDIBitmap CreateCompatibleDC BitBlt DeleteObject GetStockObject CreateCompatibleBitmap CreateDCW CreatePatternBrush GetTextExtentPoint32W RestoreDC SaveDC DeleteMetaFile CreateBitmap CreateRectRgn PatBlt PlayMetaFile SelectClipRgn SetBkColor SetMapMode SetMetaFileBitsEx SetPixel SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx UnrealizeObject

advapi32

SetSecurityDescriptorOwner CryptDestroyHash CryptCreateHash CryptDestroyKey CryptReleaseContext CryptAcquireContextW RegOpenKeyW RegOverridePredefKey LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW GetTokenInformation FreeSid EqualSid AllocateAndInitializeSid OpenThreadToken OpenProcessToken SetEntriesInAclW RegQueryValueExW SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateWellKnownSid RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyW RegEnumValueW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

ShellExecuteW SHBrowseForFolderW SHGetFolderPathW ShellExecuteExW SHGetPathFromIDListW SHGetMalloc CommandLineToArgvW

ole32

StringFromGUID2 CoCreateGuid CLSIDFromProgID CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemRealloc CoTaskMemFree CoUninitialize CoInitializeSecurity CoInitialize CoCreateInstance

oleaut32

VarBstrFromDate GetErrorInfo CreateErrorInfo VarUI4FromStr VarBstrCat SetErrorInfo SystemTimeToVariantTime SysStringByteLen LoadTypeLi RegisterTypeLi UnRegisterTypeLi VarBstrCmp SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen SysAllocString SysAllocStringByteLen

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW UuidCreate UuidToStringW

gdiplus

GdipGetImageWidth GdipGetImageHeight GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipDrawImageRectI GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromResource

Name

.text

Size

663KB

Virtual Size

662KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

202KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

308KB

Virtual Size

307KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

File Explorer

SAP2000v2710Build3560Setup.exe

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

rpcrt4

gdiplus

generic