7996706129[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

7996706129.zip
Size

27KB
MD5

235d894696940a949e2d57f92d3a0829
SHA1

ed3d2be5629342033d8aa0c6f3e9257f636b67b5
SHA256

0dadd52a6b186fb4c1b37d7d079e19b96f70946d8ecb8f888e1b6b8eb44053e8
SHA512

bf08e4fd948b278f01cf13bef178b9a6e8ce01990bb530e8909d3630195a3e6a9a1d4f0f1148ec8bc995f492238c2ddecaa2ec6aff24720da75b980d83ae72d8
SSDEEP

768:kqwNy15CYlNuliXhh0Rut6OSVp4detAkaRkfW:ONSNXhWkw2etvo5

Score

N/A

Malware Config

Signatures

Files

7996706129.zip
.zip

Password: infected
8ad01b028e6aa711d26879d346a7bef82516e372e0f14e8e69db6aef0f25d992
.exe windows x86

653ee44c85bc91d12ec33dfed8056c27

Code Sign

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/08/2019, 00:00

Not After

15/08/2022, 12:00

Subject

CN=Kuwait Telecommunications Company KSC,OU=Kuwait Telecommunications Company,O=Kuwait Telecommunications Company KSC,L=Salmiya,C=KW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a
Signer

Actual PE Digest

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Kuwait Telecommunications Company KSC,OU=Kuwait Telecommunications Company,O=Kuwait Telecommunications Company KSC,L=Salmiya,C=KW

09/09/2022, 12:45
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptHashData
CryptImportKey

comdlg32

GetOpenFileNameA

kernel32

AddAtomA
CloseHandle
CreateDirectoryW
CreateFileW
CreateMutexA
CreatePipe
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
GetAtomNameA
GetCurrentProcess
GetDriveTypeW
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetLastError
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathA
GetVolumePathNamesForVolumeNameW
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LeaveCriticalSection
LoadLibraryW
MoveFileExW
MultiByteToWideChar
OpenMutexA
ReadFile
ReleaseMutex
SetFileAttributesW
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
SetVolumeMountPointW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile
lstrcatW
lstrcpyW
lstrlenA
lstrlenW

msvcrt

_strlwr
_wcslwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_snwprintf
_wcslwr
abort
atexit
exit
free
malloc
memcpy
memset
rand
realloc
signal
sprintf
srand
strcat
strcmp
strcpy
strlen
strstr
swprintf
time
wcscat
wcscpy
wcsrchr
wcsstr

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

653ee44c85bc91d12ec33dfed8056c27

Code Sign

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8Certificate

Extended Key Usages

Key Usages

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4aSigner

Signature Validations

Verification

09/09/2022, 12:45 Valid: false

Headers

File Characteristics

Imports

advapi32

comdlg32

kernel32

msvcrt

user32

Sections

.text Size: 27KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 772B

.bss Size: - Virtual size: 66KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8
Certificate

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a
Signer

09/09/2022, 12:45
Valid: false

.text
Size: 27KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 772B

.bss
Size: - Virtual size: 66KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB