evernote[.]zip

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target

evernote.zip
Size

805KB
MD5

a6de88090e20a746603a8112c621300f
SHA1

9e0f3c37463ef4062ca15cacf93a912b5e6ac582
SHA256

d5327cd91363a90a3e85d46181445cd10435c0229129394cd325805aa76cbf60
SHA512

a1605c87da435a32bb5064673a8ed6393775c7782b2bf33fd2d32be51c832742edec9b2ded027690889543c1380bff1f3e316db6cfb9197ba9cada54b2579e4c
SSDEEP

12288:dP2VD0IAHd4X+vPa+XNakwu7KUHdZusSqq9K/myQG3hrP:dxdPPjawJyfJyQGdP

Score

N/A

Malware Config

Signatures

Files

evernote.zip
.zip
en/License34.docx
.docx office2007
evernote.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:3c:06:a5:02:34:03:67:50:b4:e5:a3:04:d7:84:42
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/11/2020, 00:00

Not After

02/01/2024, 23:59

Subject

CN=Doctor Web Ltd.,O=Doctor Web Ltd.,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0e:9a:86:d7:74:54:a2:f7:c5:59:09:cb:f5:f8:5d:d3
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/11/2020, 00:00

Not After

02/01/2024, 23:59

Subject

CN=Doctor Web Ltd.,O=Doctor Web Ltd.,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:e6:dd:6d:e9:e5:1b:2e:53:ed:50:16:7e:74:7b:cf:cc:9d:7f:3a:95:d7:20:bd:78:8b:a9:62:8b:95:6f:22
Signer

Actual PE Digest

1a:e6:dd:6d:e9:e5:1b:2e:53:ed:50:16:7e:74:7b:cf:cc:9d:7f:3a:95:d7:20:bd:78:8b:a9:62:8b:95:6f:22

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Doctor Web Ltd.,O=Doctor Web Ltd.,L=Moscow,C=RU

23/05/2022, 09:00
Valid: true

Chain 1

CN=Doctor Web Ltd.,O=Doctor Web Ltd.,L=Moscow,C=RU

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

70:80:a1:2d:6e:f9:88:32:4d:8c:08:a1:bb:b0:bb:f7:b7:5d:98:fc
Signer

Actual PE Digest

70:80:a1:2d:6e:f9:88:32:4d:8c:08:a1:bb:b0:bb:f7:b7:5d:98:fc

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Doctor Web Ltd.,O=Doctor Web Ltd.,L=Moscow,C=RU

23/05/2022, 09:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:3c:06:a5:02:34:03:67:50:b4:e5:a3:04:d7:84:42Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

0e:9a:86:d7:74:54:a2:f7:c5:59:09:cb:f5:f8:5d:d3Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

1a:e6:dd:6d:e9:e5:1b:2e:53:ed:50:16:7e:74:7b:cf:cc:9d:7f:3a:95:d7:20:bd:78:8b:a9:62:8b:95:6f:22Signer

Signature Validations

Verification

23/05/2022, 09:00 Valid: true

Chain 1

70:80:a1:2d:6e:f9:88:32:4d:8c:08:a1:bb:b0:bb:f7:b7:5d:98:fcSigner

Signature Validations

Verification

23/05/2022, 09:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 327KB - Virtual size: 327KB

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 12B

04:3c:06:a5:02:34:03:67:50:b4:e5:a3:04:d7:84:42
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

0e:9a:86:d7:74:54:a2:f7:c5:59:09:cb:f5:f8:5d:d3
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

1a:e6:dd:6d:e9:e5:1b:2e:53:ed:50:16:7e:74:7b:cf:cc:9d:7f:3a:95:d7:20:bd:78:8b:a9:62:8b:95:6f:22
Signer

23/05/2022, 09:00
Valid: true

70:80:a1:2d:6e:f9:88:32:4d:8c:08:a1:bb:b0:bb:f7:b7:5d:98:fc
Signer

23/05/2022, 09:00
Valid: false

.text
Size: 327KB - Virtual size: 327KB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 12B