CO4922[.]iso | Triage

Resubmissions

09-11-2022 16:10

221109-tmnszsbgdj 10

01-11-2022 06:58

221101-hrjjaahba5 10

Sharing

Copy URL

Twitter E-mail

General

Target

CO4922.iso
Size

1.8MB
MD5

698a66ccffc0bdc201f0d0aefbe1e12c
SHA1

a933cd4ba874de36711f798d064b54163cf20377
SHA256

d22d6b8996c432b8b04d64f21144785593e0c535fb2dffffae964597ac610ac3
SHA512

e8d3c7883a88ff5b35073b0ba9d7570b846bb1e4454e9e967b1dee980a121b5470da4f1a257c642cb76cf0eea44eae94c564610fe7f04bb2e156f81864173235
SSDEEP

24576:MHadOBKJGDcYOGm+FpvC04Rl3ZC499TlgxE29S3G8Ok8YdSkQtlZ:MHas9dm+n60YZCZY3FR8Ydk1

Score

N/A

Malware Config

Signatures

Files

CO4922.iso
.iso
CO.lnk
.lnk
judicature/butting.txt
judicature/england.cmd
.cmd .vbs
judicature/reorientation.dat
.dll windows x86

Code Sign

25:d0:47:6a:fb:cd:07:98:44:a4:de:3d:60:ad:eb:cb
Certificate

Issuer

CN=HLERBUOWZPFLKGSQIB

Not Before

28-10-2022 11:40

Not After

31-12-2039 23:59

Subject

CN=HLERBUOWZPFLKGSQIB

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b4:6e:08:1f:32:72:ca:f4:38:fe:0c:3a:60:ea:19:45:3a:1b:94:22
Signer

Actual PE Digest

b4:6e:08:1f:32:72:ca:f4:38:fe:0c:3a:60:ea:19:45:3a:1b:94:22

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=HLERBUOWZPFLKGSQIB

28-10-2022 15:02
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
judicature/velvety.png
.png

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Code Sign

25:d0:47:6a:fb:cd:07:98:44:a4:de:3d:60:ad:eb:cbCertificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

b4:6e:08:1f:32:72:ca:f4:38:fe:0c:3a:60:ea:19:45:3a:1b:94:22Signer

Signature Validations

Verification

28-10-2022 15:02 Valid: false

Headers

File Characteristics

Sections

CODE Size: 1.2MB - Virtual size: 1.2MB

DATA Size: 15KB - Virtual size: 14KB

BSS Size: - Virtual size: 3KB

.idata Size: 10KB - Virtual size: 9KB

.reloc Size: 98KB - Virtual size: 97KB

.rsrc Size: 221KB - Virtual size: 221KB

25:d0:47:6a:fb:cd:07:98:44:a4:de:3d:60:ad:eb:cb
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

b4:6e:08:1f:32:72:ca:f4:38:fe:0c:3a:60:ea:19:45:3a:1b:94:22
Signer

28-10-2022 15:02
Valid: false

CODE
Size: 1.2MB - Virtual size: 1.2MB

DATA
Size: 15KB - Virtual size: 14KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 10KB - Virtual size: 9KB

.reloc
Size: 98KB - Virtual size: 97KB

.rsrc
Size: 221KB - Virtual size: 221KB