8038366225[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

8038366225.zip
Size

548KB
MD5

3cc6b8b3ec19e2d114b99a2769bdb698
SHA1

a1b5274983569999a27265a40668ec988ad19355
SHA256

c81a4604d51a91e7fc7b3ed3ee512816da394728207014934bc8be6f42c4e701
SHA512

b0f3535575cacb1ab0a30de3c930a07d3590df08ec97ab946b0d8c6f261962f9e46143d478fe239b896d93a587f6bf400479f213d8294f2938d6674d34a9e502
SSDEEP

12288:66xSjPOsFfkil9ozOxGjtRM971TUM9U+A+NP/157XR1V:6ES6cfvl9oyxAtWt17tN5XR1V

Score

N/A

Malware Config

Signatures

Files

8038366225.zip
.zip

Password: infected
2f78778bf3124c08d982af124784ac89b2288731661ce9e6b6b244754c0dc71f
.exe windows x86

f851f3355570dd9088c2430db5edf70d

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:1f:23:61:7b:41:bb:22:c8:11:05:86:44:9f:20:f7:66:d8:b8:af:fc:1f:71:8f:00:18:c7:63:8d:ea:ef:de
Signer

Actual PE Digest

43:1f:23:61:7b:41:bb:22:c8:11:05:86:44:9f:20:f7:66:d8:b8:af:fc:1f:71:8f:00:18:c7:63:8d:ea:ef:de

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

23/09/2022, 10:30
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetMessageA

advapi32

OpenSCManagerA

shell32

SHGetFolderPathA

imagehlp

MakeSureDirectoryPathExists

version

GetFileVersionInfoSizeA

shlwapi

PathFileExistsA

Sections

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx0
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx1
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f851f3355570dd9088c2430db5edf70d

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

43:1f:23:61:7b:41:bb:22:c8:11:05:86:44:9f:20:f7:66:d8:b8:af:fc:1f:71:8f:00:18:c7:63:8d:ea:ef:deSigner

Signature Validations

Verification

23/09/2022, 10:30 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

imagehlp

version

shlwapi

Sections

.text Size: - Virtual size: 48KB

.rdata Size: - Virtual size: 14KB

.data Size: - Virtual size: 12KB

.upx0 Size: - Virtual size: 90KB

.upx1 Size: 514KB - Virtual size: 514KB

.reloc Size: 512B - Virtual size: 212B

.rsrc Size: 100KB - Virtual size: 466KB

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

43:1f:23:61:7b:41:bb:22:c8:11:05:86:44:9f:20:f7:66:d8:b8:af:fc:1f:71:8f:00:18:c7:63:8d:ea:ef:de
Signer

23/09/2022, 10:30
Valid: false

.text
Size: - Virtual size: 48KB

.rdata
Size: - Virtual size: 14KB

.data
Size: - Virtual size: 12KB

.upx0
Size: - Virtual size: 90KB

.upx1
Size: 514KB - Virtual size: 514KB

.reloc
Size: 512B - Virtual size: 212B

.rsrc
Size: 100KB - Virtual size: 466KB