PA$$w0rds_1234__FilerSetup2--P3[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

PA$$w0rds_1234__FilerSetup2--P3.rar
Size

7.0MB
MD5

a10b8cbd560a760537680c211abec969
SHA1

87e5bf4c3ebc36a8311d4a224d3508c667d1e35f
SHA256

9cb6c1c7c3e62531baef80a60a81a21790d25a1fadeb136e156cf15348ceb55d
SHA512

52732cf8834e90f929f45cce197493ab4cf420cc9562d6ca02093b4ffc529276d3e8cdbdc6a093c8f37b2bf553a6caf0ddeeba6f522c0ed6e243bd4fcf99b82b
SSDEEP

196608:njKNWgwwJt7HDO/ny0ZYjtwmY51Tc5bpE:njwEwJVDYny0ZYjtulc5dE

Score

N/A

Malware Config

Signatures

Files

PA$$w0rds_1234__FilerSetup2--P3.rar
.rar

Password: 1234
PA$$W0RDz =-= 1234.txt
Setup1Crakeds.exe
.exe windows x86

Password: 1234

2d328c5abe4a256052fb1546154d88bf

Code Sign

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/11/2019, 00:00

Not After

16/11/2022, 12:00

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=Unknown issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

Extended Key Usages

Key Usages

KeyUsageCertSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/07/2021, 00:00

Not After

10/07/2024, 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:14:5b:0e:5f:50:2c:60:d8:a6:61:86:95:a9:8c:ac:ed:e9:3c:34:59:82:77:8c:e4:04:90:6d:00:cd:f5:d0
Signer

Actual PE Digest

fe:14:5b:0e:5f:50:2c:60:d8:a6:61:86:95:a9:8c:ac:ed:e9:3c:34:59:82:77:8c:e4:04:90:6d:00:cd:f5:d0

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

05/04/2022, 01:58
Valid: true

Chain 1

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

dc:d1:4e:50:94:5d:ff:10:99:b1:c6:40:37:72:b2:91:0e:f1:74:7a
Signer

Actual PE Digest

dc:d1:4e:50:94:5d:ff:10:99:b1:c6:40:37:72:b2:91:0e:f1:74:7a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

05/04/2022, 01:58
Valid: true

Chain 1

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

advapi32

GetUserNameW

user32

CharUpperBuffW

Exports

Exports

�t3��[��R�T{�޹҈�w?;�Z/�5SY��u�Vl"��u��F�/�T��`�� d%I2�UCL��>֍֚��UB�;- W��2�/6��NU�6]��_��p) �9!��u�l-�m�`�2y�eSM�Yx��:��$f��'�� K�׸=�QT��)��]�J��*4`;!ጁ˨�- ��4zȉS��!��L0�Ug��Z�f�1^eP@Z�~�Đ/^:m!�]��{�_k��7U%�rd�l7��[+T�CE[~�E�U$u��P�G��%��2��Xf-�-!�֤͝�MKU/�J'8�Q�a4��NL� �9|Ħ�MqX>��_��4��+Q�� t�`��`��Y[��ģY޾R)��7V5P�U��i�1{m�6i��@=&~>� }�1XG��U/��kj�B��{��2�>�v�L56�rBl�8y�y9.}m��M�ڝ$Q��u{��k(}�2#�/m�$�y3�2��y��^\r�.��!�֣��%�qZ�g�2q�9��E��N[��7��Í��y0}42�,��[N��CZ11� �e��,��d��X�j��=n��`P��'��Gs��ȼ]��d�fin��h�Ӣ��m�!�W�~��+V�WO�'�{�m��ѻ+�vm��p��2~��Yx�9�I��ik�.*��u�T��<��o��y�/"�}X�լ�Ag��w��DO�̾ş��Ru�K��W�q��1VNg��Ĕ�B?T:��#�o��%x� �m� ��Q�� _�+t�p[��o�U9J$W�^Ȋ�o0��}��E�1)�K��E� &�I]Bh��eB�ހ�\V�e/6��@�4uw]�a�̑��5�!��H��I�ٻS�BrLW�oZ<k�ڠ��i�q�ť�?��jFו��%n��W��ŗ �j��kpF\��&�]��=��n��|��'s �@l"�M��~�;lI9J�9�ޟ�1��au.L�tE��#R��.\��[q�}c�h��&��Ƿ��T�S��őt��={��~�"��x"�Q��2��[��ن}��0��Å�o��r�!�,,��:~�Fn��ܤ_e{Ζ�'��m5Y�m<��9��pI&f��О��NI6%w9��Y�A��RH�7B��*��R�� r�BU_߃[R��HZ��H�,��`�`�--��\��l�O�*�J_��ppO�@fW�1Z;2��Ԅ&hG+��?,�Erw�b8.h��^7^��)�O�=N�Bۃ��x�-��?��W�X�i��TU��'<9 h�' � �Dǖ�u�@�6��/��A�9WS�o�J�/Z��{}힖�2��-��ʣF��<�my�Ξ�Ҟ.#�<r��CN�Y-�RA��̳��zVZ� U`I��C�K4s�n�C� WD$֨O��k�q�e�bXB�H��q��:�ˌ<��W(QE��,' dr��/ ��1D�PVg�g�4"��9��yeSz�Y%�e&[]D%�}~��E�\n5S�P�F �;=î��}��1o�Q�sK��~Ȳ>3�C��T�x7��/�GɉE�4J�}� �r��9��&9m�A�&�E*�I3r%D_�?9��/�D^�� r4�GXΤ�;�MO�#��}�[-��2)��½��V��A��2��nPΞ��Qq�K�Y�{Ro�3�oJ�(�N/�1��{0;KA�R��`��`�L$K<,q��٪��_j�CW��س�thDd~��Z�o�ȯ�ӂk͎uW��_A@��}�ސ�t�S&�D�I�� ǔ�a4 ��2_�Z��*.U�b#8��66�� n��4OZw��1S=qwv��k�I�� {tj�/��$0�jˀ>}t_��q�b�>��oԩ�k�y�F��0 ��4Y�B��M'�6�E��Tb��֛2�uz�� @��yޠ��1�ߙ��߀�� f��s\��_�x,p��1KC�\R*�Փ��X��Ĵ�|�Tt��j��D�{��k��v � >˱bI�V"ف��Rd�4��gz�G:T�K�� ';��)�d&��(��2C@�t�a��4�;$QgM[�w�Ѯ��ޞoo�j��F��[ʝ��L�ݗ��@�+�;F^�=��=�>"8�Ŗ�З��Y�@0�{63)�CF�4�}ܿ;��q�o��O;��9��iY$ǖ�>�C��3D.p�D|t��l� z��uk��o7�M"��[%�Q�� R%��X��]>�VX̨-��C:~�}�Y�a��ed��o��ڑ��_��)OE"IJrbT4�D(#Ca@ ��8*1��ț&~|:E��[uА�.?I��bƛ�8 ��2��U�;hς��W-{?C��0'��-��>_hAn> TԼ��8�u��)\�y��6ǋ}��H��S�s�\��V�Tx�^Y��KU��p��֦�>- Gr��>Bq�L��%mÑa�ѝ�c�� 92j��ݡ�M��Ĕkg0 ��U;��qS�;�V^z��{&s]F~�q�ok��w�gb��ڏ�x�ǰ�Rf�N � u��U��%�t�>�<+��*�e]�7�K$��Q��hN"H�WҢgGc�t�D�;�J��~�`C-4�a;�y-0}��4�ݢ�F$�+��k�\��wT��q� ��r��<x ��?��DčOBUK��:z��i��;��cߘQ�� s_��,��ڐ�m鎙l�g��{��r��㯼��7��)i*��Q��m �[��$F��I%й�Bo� i�.��W\n�t}�FC�V*36��E��M%�0&e��

Sections

.text
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yE6
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JBR
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

./O(
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

2d328c5abe4a256052fb1546154d88bf

Code Sign

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

01Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

fe:14:5b:0e:5f:50:2c:60:d8:a6:61:86:95:a9:8c:ac:ed:e9:3c:34:59:82:77:8c:e4:04:90:6d:00:cd:f5:d0Signer

Signature Validations

Verification

05/04/2022, 01:58 Valid: true

Chain 1

dc:d1:4e:50:94:5d:ff:10:99:b1:c6:40:37:72:b2:91:0e:f1:74:7aSigner

Signature Validations

Verification

05/04/2022, 01:58 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 41KB

.rdata Size: - Virtual size: 6KB

.data Size: - Virtual size: 5KB

.yE6 Size: - Virtual size: 4.0MB

.JBR Size: 1024B - Virtual size: 880B

./O( Size: 7.1MB - Virtual size: 7.1MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 122KB - Virtual size: 121KB

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

01
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

fe:14:5b:0e:5f:50:2c:60:d8:a6:61:86:95:a9:8c:ac:ed:e9:3c:34:59:82:77:8c:e4:04:90:6d:00:cd:f5:d0
Signer

05/04/2022, 01:58
Valid: true

dc:d1:4e:50:94:5d:ff:10:99:b1:c6:40:37:72:b2:91:0e:f1:74:7a
Signer

05/04/2022, 01:58
Valid: true

.text
Size: - Virtual size: 41KB

.rdata
Size: - Virtual size: 6KB

.data
Size: - Virtual size: 5KB

.yE6
Size: - Virtual size: 4.0MB

.JBR
Size: 1024B - Virtual size: 880B

./O(
Size: 7.1MB - Virtual size: 7.1MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 122KB - Virtual size: 121KB