The CameraMouse2018Installer exe (Camera Mouse 2018 Setup) Boston College File Malware Analysis

The CameraMouse2018Installer.exe (Camera Mouse 2018 Setup) File Analysis

Updated 8 days ago

Checked by Malware Check

CameraMouse2018Installer.exe

Hash Type	Value	Action
MD5	1367ff12a6144231e0445678f6801b61
SHA1	a1f7b1343708d9ac7939cee93994d58ed802af97
SHA256	2e4febdb40c109273621c7df1f42e250c490d6ac06934150efdcea7ec86f4434
SHA512	def22069f13b1c665152a64d41b14617ef852a02603098daacb6b8625bf9db59a0a9b8b67ea418ec82b8a8660ac93c8356b9ee34dbb63a83853da5e58cf7ac57
ImpHash	2fb819a19fe4dee5c03e8c6a79342f79

Hash Type

Value

Action

MD5

1367ff12a6144231e0445678f6801b61

SHA1

a1f7b1343708d9ac7939cee93994d58ed802af97

SHA256

2e4febdb40c109273621c7df1f42e250c490d6ac06934150efdcea7ec86f4434

SHA512

def22069f13b1c665152a64d41b14617ef852a02603098daacb6b8625bf9db59a0a9b8b67ea418ec82b8a8660ac93c8356b9ee34dbb63a83853da5e58cf7ac57

ImpHash

2fb819a19fe4dee5c03e8c6a79342f79

PE Analysis

Basic Information

▼

Icon	Hash: d59eafd5e5c08a70564b69885528afb9 Fuzzy: 894e8a40b7dee30b4105298424c12fd7 dHash: c0968296968296c0
Image Base	`0x00400000`
Entry Point	`0x0040aa98`
Compilation Time	1992-06-19 22:22:17
Checksum	0x006e8cf7 (Actual: 0x006e8cf7)
OS Version	1.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	Chain verification from CN=Trustees of Boston College, O=Trustees of Boston College, STREET=140 Commonwealth Avenue, L=Chestnut Hill, ST=Massachusetts, 2.5.4.17=02467, C=US (serial:299881115347856406309494794847578808854, sha1:c5e47ec33a9b2d6a43a11ab29318cd3bc2b5df5c) failed: The path could not be validated because the end-entity certificate expired 2018-09-13 23:59:59Z
Imports	5 libraries kernel32, user32, oleaut32, advapi32, comctl32
Exports	0 functions
Resources	11 Resources
Sections	8 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName	Boston College
FileDescription	Camera Mouse 2018 Setup
FileVersion
LegalCopyright
ProductName	Camera Mouse 2018
ProductVersion	1.1
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`CODE`	`0x00001000`	41,424 bytes	41,472 bytes	6.64 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B7EA439D9C6D5EC722056C9243FB3054`
`DATA`	`0x0000c000`	592 bytes	1,024 bytes	2.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9B2268ED5360951559D8041925D025FB`
`BSS`	`0x0000d000`	3,732 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0000e000`	2,428 bytes	2,560 bytes	4.49 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DF5F31E62E05C787FD29EED7071BF556`
`.tls`	`0x0000f000`	8 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00010000`	24 bytes	512 bytes	0.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`14DFA4128117E7F94FE2F8D7DEA374A0`
`.reloc`	`0x00011000`	2,332 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00012000`	10,088 bytes	10,240 bytes	3.46 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`3542349602CAE682AAAC4062966425E8`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 11 (9,374 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	3,752 bytes	40%
RT_STRING	6	2,710 bytes	28.9%
RT_RCDATA	1	44 bytes	0.5%
RT_GROUP_ICON	1	20 bytes	0.2%
RT_VERSION	1	1,268 bytes	13.5%
RT_MANIFEST	1	1,580 bytes	16.9%

Certificate Chain Analysis

▼

Certificate Information

Product	Camera Mouse 2018
Description	Camera Mouse 2018 Setup
Verification Status	A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Signers	Trustees of Boston College; COMODO RSA Code Signing CA; Sectigo (formerly Comodo CA)

Certificate Chain Summary

Trustees of Boston College #1 Primary

Validity Period: 2015-09-14 00:00:00 → 2018-09-13 23:59:59

Signature Algorithm: sha256RSA

Serial Number: E1 9B 00 81 CA BD 02 D2 11 52 FE 68 84 14 E2 16

COMODO RSA Code Signing CA #2 Chain

Validity Period: 2013-05-09 00:00:00 → 2028-05-08 23:59:59

Signature Algorithm: sha384RSA

Serial Number: 2E 7C 87 CC 0E 93 4A 52 FE 94 FD 1C B7 CD 34 AF

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

Chain verification from CN=Trustees of Boston College, O=Trustees of Boston College, STREET=140 Commonwealth Avenue, L=Chestnut Hill, ST=Massachusetts, 2.5.4.17=02467, C=US (serial:299881115347856406309494794847578808854, sha1:c5e47ec33a9b2d6a43a11ab29318cd3bc2b5df5c) failed: The path could not be validated because the end-entity certificate expired 2018-09-13 23:59:59Z

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	CameraMouse2018Installer.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.221.174
Database Version	2025-07-24 13:00:34 UTC

The CameraMouse2018Installer.exe (Camera Mouse 2018 Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification