7c213efd427bc3a594a4d794cbb40b63ce8a3e3dc19312011cb7ddbf60811da1[.]7z

Resubmissions

13-06-2022 00:03

220613-acantscfak 10

13-05-2022 11:28

220513-nkzjtahhen 8

Sharing

Copy URL

Twitter E-mail

Reason

too many matches

General

Target

7c213efd427bc3a594a4d794cbb40b63ce8a3e3dc19312011cb7ddbf60811da1.7z
Size

1.9MB
MD5

52d6cf015c5de21b5f5ebf0ee4f3a871
SHA1

92aa796e662269597d148677a3f86d84b279465c
SHA256

22c221710c9492fc848dbc20ee8833a30648c07a9a7d011511820d751a4117db
SHA512

90c0d09569527170307cde1c133c9c98c36c0175873f46c52fcaf0c81854b52bbb3a113407376d6d20add92756fc6edb95191f4f1f1a2ebdddef70d6ad42af65
SSDEEP

49152:A8epxhHnQRpdR7PwNDKm/K+sdnqTkzZFk900zZ0Zh:ADwRpvrw4m/MdqTk1O9BzZ4

Score

N/A

Malware Config

Signatures

Files

7c213efd427bc3a594a4d794cbb40b63ce8a3e3dc19312011cb7ddbf60811da1.7z
.7z
7c213efd427bc3a594a4d794cbb40b63ce8a3e3dc19312011cb7ddbf60811da1
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:24:90:6f:41:bb:30:c9:fe:a7:c9:1c:ec:df:5b:fa
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-04-2022 00:00

Not After

28-04-2023 23:59

Subject

SERIALNUMBER=1286838-5,CN=Snowi Tech Inc.,O=Snowi Tech Inc.,L=Toronto,ST=Ontario,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1c:a0:23:e0:9f:28:81:30:98:87:55:da:ef:82:94:cf:a7:5a:18:df
Signer

Actual PE Digest

1c:a0:23:e0:9f:28:81:30:98:87:55:da:ef:82:94:cf:a7:5a:18:df

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=1286838-5,CN=Snowi Tech Inc.,O=Snowi Tech Inc.,L=Toronto,ST=Ontario,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

09-06-2022 15:53
Valid: true

Chain 1

SERIALNUMBER=1286838-5,CN=Snowi Tech Inc.,O=Snowi Tech Inc.,L=Toronto,ST=Ontario,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

Errors

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:24:90:6f:41:bb:30:c9:fe:a7:c9:1c:ec:df:5b:faCertificate

Extended Key Usages

Key Usages

1c:a0:23:e0:9f:28:81:30:98:87:55:da:ef:82:94:cf:a7:5a:18:dfSigner

Signature Validations

Verification

09-06-2022 15:53 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 301KB - Virtual size: 300KB

.reloc Size: 512B - Virtual size: 12B

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:24:90:6f:41:bb:30:c9:fe:a7:c9:1c:ec:df:5b:fa
Certificate

1c:a0:23:e0:9f:28:81:30:98:87:55:da:ef:82:94:cf:a7:5a:18:df
Signer

09-06-2022 15:53
Valid: true

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 301KB - Virtual size: 300KB

.reloc
Size: 512B - Virtual size: 12B