6175910434340864.zip
- SHA256 7a381baee55dabd578bf198e4680d98d3057142cff19713612fc4bfa1ae39369
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
bca43b8251b1c4ac499b1d0543a86aee4fd76da1e203f011f0f1e68a03844820.exe
Resource
win7-20220310-en
windows7_x64
0 signatures
0 seconds
General
- Target 6175910434340864.zip
- Size 97KB
- Sample220316-tz97rafcd4
- SHA256 7a381baee55dabd578bf198e4680d98d3057142cff19713612fc4bfa1ae39369
- MD5 f23b0397e879bc6ef5b62b8d925bdbf7
- SHA1 390268bce1eb56e57012e66fd7390e33f8838bdc
- SHA512 90d49c709784204442b0e2796154a3bee9b9c096bfe1695818c6d075db8d1c6ba4f2da3429c3f19b2747cc5ad55bfa3eaa33b66d7c712accb6eb47979b3e1cc2
- MD5 SHA1 SHA512
Score
N/A
Malware Config
Signatures
File Explorer
-
6175910434340864.zip.zip 97KB
-
bca43b8251b1c4ac499b1d0543a86aee4fd76da1e203f011f0f1e68a03844820.exe 252KB
bca43b8251b1c4ac499b1d0543a86aee4fd76da1e203f011f0f1e68a03844820
- IMPHASH c4715cf6be93a0d532bbd0073142431e
- SHA256 bca43b8251b1c4ac499b1d0543a86aee4fd76da1e203f011f0f1e68a03844820
- MD5 067fbc7cbc5e7dcd5f63047727ec08e9
- SHA1 8bf52ba841861d82f56e483993cd8e5558168133
- SHA512 d28b10e3c037958cc24cca6dbc731c96148a8214c9d6bab3b279fd666cc2c8624c07a50aa87559f1e2d8f52c9de6c8bd588aab8fd98b352897d66dc70e7c1b59
- MD5 SHA1 SHA512
PE Signature issue
Digest
ce:fa:d9:9c:8b:f1:0f:39:2c:ff:1c:48:06:c4:a9:23:ba:dc:cc:37
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Subject
CN=EUROPE'S BEST GOODS LTD,O=EUROPE'S BEST GOODS LTD,L=BLACKPOOL,ST=Lancashire,C=GB
Serial Number
55:63:bd:ee:cb:41:19:92:8d:2c:e6:00:fb:48:e5:b4
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 18, 2021 - May 18, 2022
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Minor OS version
Major OS version
Entry point
22112
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
HeapFree
AddConsoleAliasW
GetProcessHeap
GetConsoleAliasesLengthA
GlobalAlloc
GetSystemDirectoryW
LoadLibraryW
SetVolumeMountPointA
GetVersionExW
GetAtomNameW
lstrlenW
ReplaceFileA
GetPrivateProfileIntW
ReleaseActCtx
SetLastError
VirtualAlloc
SetEnvironmentVariableW
LoadLibraryA
WriteConsoleA
SetCalendarInfoW
SetConsoleCtrlHandler
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
FreeEnvironmentStringsW
GetConsoleTitleW
VirtualProtect
CompareStringA
GetCPInfoExA
CloseHandle
AllocConsole
ReadConsoleA
FindFirstChangeNotificationW
SetStdHandle
LocalUnlock
CreateFileA
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapAlloc
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
WindowFromPoint
gdi32
GetFontUnicodeRanges
advapi32
GetOldestEventLogRecord
winhttp
WinHttpCloseHandle
msimg32
TransparentBlt
Name
.text
Size
201KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ