SetupLauncher[.]zip

Sharing

Copy URL

Twitter E-mail

Reason

scan timeout

General

Target

SetupLauncher.zip
Size

5.0MB
MD5

a0548b272551275f4303cf53ac9378b8
SHA1

ca7f7a57927be45c1510359c9fdea80630851bd7
SHA256

180f44119a00e7a4db6d98b0329cf47703723ba4e73f2474c6274cd57e4ce47e
SHA512

9a31b2c9ae9bab06d9d7aa66d72078f2501243ff971227b092ce21b389af9abbc59d4b8f7ef416435534f0efd38b3a1e8761ea6c0130c88fb9d97041c057603d
SSDEEP

98304:cE6T8s8+AaVg2+suiKcJ/W8OY/Vk+PYisGaRj1HZcLgRZXZ:cA7+Vurk/WHwk+paRPck7XZ

Score

N/A

Malware Config

Signatures

Files

SetupLauncher.zip
.zip

Password: 2022
About/Windows.Data.TimeZones/Windows.Data.TimeZones.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ar-SA.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.bg-BG.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.cs-CZ.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.da-DK.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.de-DE.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.el-GR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-GB.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-US.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.es-ES.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.et-EE.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fi-FI.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fr-FR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.he-IL.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hr-HR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hu-HU.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.it-IT.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ja-JP.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ko-KR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lt-LT.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lv-LV.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nb-NO.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nl-NL.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pl-PL.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-BR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-PT.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ro-RO.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ru-RU.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sk-SK.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sl-SI.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sr-Latn-RS.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sv-SE.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.th-TH.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.tr-TR.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.uk-UA.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-CN.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-HK.pri
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-TW.pri
Setup.exe
.exe windows x86

Password: 2022

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:37:f2:5a:88:e2:4c:af:dd:79:19:fa:30:1e:81:46
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16-12-2019 00:00

Not After

16-11-2021 12:00

Subject

CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19-09-2018 00:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:55

Not After

15-04-2021 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:09:50:26:3e:06:49:6a:27:81:f5:50
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

11-07-2018 11:33

Not After

11-07-2021 11:33

Subject

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:90:8c:76:7a:7c:3e:55:fa:e8:a6:f5:80:64:91:95:bf:ed:23:52:b8:3e:5d:88:e5:35:ad:25:e3:d0:09:c5
Signer

Actual PE Digest

cc:90:8c:76:7a:7c:3e:55:fa:e8:a6:f5:80:64:91:95:bf:ed:23:52:b8:3e:5d:88:e5:35:ad:25:e3:d0:09:c5

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

26-06-2020 12:06
Valid: true

Chain 1

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Chain 2

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,OU=Cloud\, Services and Infrastructure,O=Avira Operations GmbH & Co. KG,STREET=Kaplaneiweg 1,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,1.2.840.113549.1.9.1=#0c0c63614061766972612e636f6d,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

fb:16:fc:bd:7d:8c:c2:47:c0:03:cb:c8:9f:fa:34:2e:28:f3:9d:0a
Signer

Actual PE Digest

fb:16:fc:bd:7d:8c:c2:47:c0:03:cb:c8:9f:fa:34:2e:28:f3:9d:0a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,C=DE

26-06-2020 12:06
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

Password: 2022

Password: 2022

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

05:37:f2:5a:88:e2:4c:af:dd:79:19:fa:30:1e:81:46Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

61:29:15:27:00:00:00:00:00:2aCertificate

Key Usages

2a:09:50:26:3e:06:49:6a:27:81:f5:50Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

cc:90:8c:76:7a:7c:3e:55:fa:e8:a6:f5:80:64:91:95:bf:ed:23:52:b8:3e:5d:88:e5:35:ad:25:e3:d0:09:c5Signer

Signature Validations

Verification

26-06-2020 12:06 Valid: true

Chain 1

Chain 2

fb:16:fc:bd:7d:8c:c2:47:c0:03:cb:c8:9f:fa:34:2e:28:f3:9d:0aSigner

Signature Validations

Verification

26-06-2020 12:06 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.6MB - Virtual size: 4.6MB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

05:37:f2:5a:88:e2:4c:af:dd:79:19:fa:30:1e:81:46
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

61:29:15:27:00:00:00:00:00:2a
Certificate

2a:09:50:26:3e:06:49:6a:27:81:f5:50
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

cc:90:8c:76:7a:7c:3e:55:fa:e8:a6:f5:80:64:91:95:bf:ed:23:52:b8:3e:5d:88:e5:35:ad:25:e3:d0:09:c5
Signer

26-06-2020 12:06
Valid: true

fb:16:fc:bd:7d:8c:c2:47:c0:03:cb:c8:9f:fa:34:2e:28:f3:9d:0a
Signer

26-06-2020 12:06
Valid: false

.text
Size: 4.6MB - Virtual size: 4.6MB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 512B - Virtual size: 12B