Holland-America-Donation-Request-Form[.]zip

Sharing

Copy URL

Twitter E-mail

Reason

too many matches

General

Target

Holland-America-Donation-Request-Form.zip
Size

3.7MB
MD5

6cfaf6a745998acd04eb2b76eda187a3
SHA1

768aa50a4068edca5d8507c4a3d576a865b52ba9
SHA256

c9399782497f76cf663bfcaf7cc57eb8f9bb40a12baf104026a882d689e2a587
SHA512

92eff0204e69fc3da0dab69339a2dc0686577bb1bc438881640df60e8d73f9d218ed40d102c6e56fb8265886c0f9c659c27effd03ed9db334162b484d52fb009
SSDEEP

98304:akoNmjmh7VfE1MZ2NxZJVEbRbZNyrqZM3L8KGe:DljA7VjZ2NxfAZZ/ZiL8KD

Score

N/A

Malware Config

Signatures

Files

Holland-America-Donation-Request-Form.zip
.zip

Password: infected
Holland-America-Donation-Request-Form.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:6d:1b:a1:22:c0:e6:58:63:52:d5:5d:24:6d:07:a0
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

10-06-2022 00:00

Not After

10-05-2023 23:59

Subject

SERIALNUMBER=18040852,CN=G & D Consulting\, LLC.,O=G & D Consulting\, LLC.,L=Columbus,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4e:32:20:56:6e:94:ac:67:e9:00:97:51:e4:5d:a2:72:ae:8b:18:6c
Signer

Actual PE Digest

4e:32:20:56:6e:94:ac:67:e9:00:97:51:e4:5d:a2:72:ae:8b:18:6c

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=18040852,CN=G & D Consulting\, LLC.,O=G & D Consulting\, LLC.,L=Columbus,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553

09-06-2022 15:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:6d:1b:a1:22:c0:e6:58:63:52:d5:5d:24:6d:07:a0Certificate

Extended Key Usages

Key Usages

4e:32:20:56:6e:94:ac:67:e9:00:97:51:e4:5d:a2:72:ae:8b:18:6cSigner

Signature Validations

Verification

09-06-2022 15:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 285KB - Virtual size: 284KB

.reloc Size: 512B - Virtual size: 12B

.text Size: 8KB - Virtual size: 8KB

.rsrc Size: 285KB - Virtual size: 284KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:6d:1b:a1:22:c0:e6:58:63:52:d5:5d:24:6d:07:a0
Certificate

4e:32:20:56:6e:94:ac:67:e9:00:97:51:e4:5d:a2:72:ae:8b:18:6c
Signer

09-06-2022 15:54
Valid: false

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 285KB - Virtual size: 284KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 285KB - Virtual size: 284KB