Pass_1234_Setup(1)[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Pass_1234_Setup(1).rar
Size

7.0MB
MD5

440bd0595d579daee49d5a153927f4b3
SHA1

ac43b464c94dbd20dd250b0e0546f3c5b6236846
SHA256

593145d019e39b120502bde7ac1fc3840707cdc66de750409fde17a88e99e49e
SHA512

21a8a531607c0c5c7162bd91c9b42eaaae5475a3667c8c8e0ff43a7f5637f4ad4d778d55b9e8552aa0ea22a96bb04dd766f40a505b9dbfb54b40fd9586266412
SSDEEP

196608:TyTBivqnXMBAyhCIqBE5de+k3EMqL1icf2DMCV6A+4P:TyTQvecB3MIaueh051ihMgj+4P

Score

N/A

Malware Config

Signatures

Files

Pass_1234_Setup(1).rar
.rar

Password: 1234
Setup.exe
.exe windows x86

Password: 1234

dbfedc155114e93b03253d2457becdac

Code Sign

57:45:48:ac:15:69:87:9b:4c:24:2a:9a:28:9e:f1:5c
Certificate

Issuer

CN=Toshiba MQ01ABMxx 2.5 WH03ABW030

Not Before

11/10/2022, 11:46

Not After

12/10/2032, 11:46

Subject

CN=Toshiba MQ01ABMxx 2.5 WH03ABW030

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:d6:29:12:c0:0c:81:90:9d:49:3a:07:73:e0:20:56:73:f3:e7:f1:0d:14:03:8f:a9:3a:8e:32:e4:d0:b0:96
Signer

Actual PE Digest

00:d6:29:12:c0:0c:81:90:9d:49:3a:07:73:e0:20:56:73:f3:e7:f1:0d:14:03:8f:a9:3a:8e:32:e4:d0:b0:96

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Toshiba MQ01ABMxx 2.5 WH03ABW030

06/10/2022, 18:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wtsapi32

WTSSendMessageW

user32

GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

Sections

.text
Size: - Virtual size: 989B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ỬỮ��
Size: - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ỬỮ��
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
langs/Croatian.ini
langs/Danish.ini
langs/English.ini
langs/Finnish.ini
langs/Hebrew.ini
langs/Hungarian.ini
.ps1
langs/Indonesian.ini
langs/Japanese.ini
langs/Kazakh.ini
langs/Korean.ini
.ps1
langs/Kurdish.ini
langs/Norwegian.ini
langs/SimpChinese.ini
langs/Sinhala.ini
langs/Slovak.ini
langs/Swedish.ini
langs/Thai.ini
langs/TradChinese.ini
langs/Ukrainian.ini
langs/UyghurLatin.ini
langs/Uzbek.ini
langs/Vietnamese.ini

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

dbfedc155114e93b03253d2457becdac

Code Sign

57:45:48:ac:15:69:87:9b:4c:24:2a:9a:28:9e:f1:5cCertificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

00:d6:29:12:c0:0c:81:90:9d:49:3a:07:73:e0:20:56:73:f3:e7:f1:0d:14:03:8f:a9:3a:8e:32:e4:d0:b0:96Signer

Signature Validations

Verification

06/10/2022, 18:39 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wtsapi32

user32

Sections

.text Size: - Virtual size: 989B

.rdata Size: - Virtual size: 678B

.data Size: - Virtual size: 165KB

ỬỮ�� Size: - Virtual size: 3.7MB

ỬỮ�� Size: 5.9MB - Virtual size: 5.9MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 102KB - Virtual size: 101KB

57:45:48:ac:15:69:87:9b:4c:24:2a:9a:28:9e:f1:5c
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

00:d6:29:12:c0:0c:81:90:9d:49:3a:07:73:e0:20:56:73:f3:e7:f1:0d:14:03:8f:a9:3a:8e:32:e4:d0:b0:96
Signer

06/10/2022, 18:39
Valid: false

.text
Size: - Virtual size: 989B

.rdata
Size: - Virtual size: 678B

.data
Size: - Virtual size: 165KB

ỬỮ��
Size: - Virtual size: 3.7MB

ỬỮ��
Size: 5.9MB - Virtual size: 5.9MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 102KB - Virtual size: 101KB