805890d80bdacaac53704fe9528b24cd900cd9dd6e9cac5f759440798b31ca93

Sharing

Copy URL Twitter E-mail

General

Target

805890d80bdacaac53704fe9528b24cd900cd9dd6e9cac5f759440798b31ca93
Size

334KB
MD5

3dc5b75c448d1a94c3bed529dfb522b6
SHA1

a374ef426ea969159f17d8f2bf5c5b080024abfe
SHA256

805890d80bdacaac53704fe9528b24cd900cd9dd6e9cac5f759440798b31ca93
SHA512

3409fdcac439fd796bc23a5fea4b6cc562b5eed7c722d8155b8e93f8028935ff70b432c1668487450487acfc502ba54086ebf31d9020d1debab2a699f2275fd0
SSDEEP

6144:6Qi4YyC0oAazNLErlSrQqIn8nkWaSvwTDKlja0fuTXn4Ym6:6QiHzjnhIlqQqW8nk1Sv1aBL4j6

Score

N/A

Malware Config

Signatures

Files

805890d80bdacaac53704fe9528b24cd900cd9dd6e9cac5f759440798b31ca93
.zip
Realtek-Pcie-Gbe-Family-Controller-驅動-下載.zip
.zip
Realtek-Pcie-Gbe-Family-Controller-驅動-下載.exe
.exe windows x86

f86972b0b9fc89569bd497bebfd6a497

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

05/10/2020, 22:00

Not After

05/10/2022, 22:00

Subject

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

05/10/2020, 22:00

Not After

05/10/2022, 22:00

Subject

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bb:4d:8e:1b:8e:0d:26:df:5b:d1:37:2d:9b:92:c9:09:90:73:2d:f4:5c:71:d7:56:9b:1e:2b:93:03:e6:40:fd
Signer

Actual PE Digest

bb:4d:8e:1b:8e:0d:26:df:5b:d1:37:2d:9b:92:c9:09:90:73:2d:f4:5c:71:d7:56:9b:1e:2b:93:03:e6:40:fd

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

06/10/2022, 18:34
Valid: false

09:3b:6f:cc:3d:fe:46:95:f0:aa:48:26:40:6a:77:a7:01:2b:45:fb
Signer

Actual PE Digest

09:3b:6f:cc:3d:fe:46:95:f0:aa:48:26:40:6a:77:a7:01:2b:45:fb

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

06/10/2022, 18:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
IsBadHugeReadPtr
SetEndOfFile
FindResourceExW
GetConsoleAliasExesLengthA
GetConsoleAliasA
InterlockedDecrement
HeapFree
SetVolumeMountPointW
SetThreadExecutionState
GetSystemDefaultLCID
ConvertFiberToThread
WaitNamedPipeW
SetCommTimeouts
EnumResourceTypesA
GlobalAlloc
SetFileShortNameW
LoadLibraryW
ReadConsoleInputA
GetFileAttributesA
DnsHostnameToComputerNameW
GetFileAttributesW
SetTimeZoneInformation
WriteConsoleW
GetGeoInfoA
GetBinaryTypeW
LCMapStringA
GetCPInfoExW
TlsGetValue
GetLastError
GetProcAddress
VirtualAlloc
SetComputerNameA
GlobalGetAtomNameA
LoadLibraryA
WriteConsoleA
LocalAlloc
GetFileType
WritePrivateProfileStringA
CreateEventW
AddAtomA
FoldStringA
FindNextFileA
SetConsoleCursorInfo
GetModuleHandleA
FindFirstChangeNotificationA
CreateMutexA
FindNextFileW
VirtualProtect
GetFileAttributesExW
SetFileShortNameA
GetVersion
SetFileValidData
EnumCalendarInfoExA
SetFileAttributesW
IsBadStringPtrW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapAlloc
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
DeleteCriticalSection
SetFilePointer
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
ReadFile
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
HeapSize
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f86972b0b9fc89569bd497bebfd6a497

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43Certificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

bb:4d:8e:1b:8e:0d:26:df:5b:d1:37:2d:9b:92:c9:09:90:73:2d:f4:5c:71:d7:56:9b:1e:2b:93:03:e6:40:fdSigner

Signature Validations

Verification

06/10/2022, 18:34 Valid: false

09:3b:6f:cc:3d:fe:46:95:f0:aa:48:26:40:6a:77:a7:01:2b:45:fbSigner

Signature Validations

Verification

06/10/2022, 18:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 96KB - Virtual size: 96KB

.data Size: 212KB - Virtual size: 222KB

.rsrc Size: 113KB - Virtual size: 112KB

.reloc Size: 8KB - Virtual size: 7KB

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

bb:4d:8e:1b:8e:0d:26:df:5b:d1:37:2d:9b:92:c9:09:90:73:2d:f4:5c:71:d7:56:9b:1e:2b:93:03:e6:40:fd
Signer

06/10/2022, 18:34
Valid: false

09:3b:6f:cc:3d:fe:46:95:f0:aa:48:26:40:6a:77:a7:01:2b:45:fb
Signer

06/10/2022, 18:34
Valid: false

.text
Size: 96KB - Virtual size: 96KB

.data
Size: 212KB - Virtual size: 222KB

.rsrc
Size: 113KB - Virtual size: 112KB

.reloc
Size: 8KB - Virtual size: 7KB