5da219f776810a42d8c8e26989f420ece92e87b6279e3bb39dc9627ad0b7f909[.]zip

Sharing

Copy URL

Twitter E-mail

Reason

too many matches

General

Target

5da219f776810a42d8c8e26989f420ece92e87b6279e3bb39dc9627ad0b7f909.zip
Size

3.5MB
MD5

975ee61886c89ddb5676a4f20d8c3fc2
SHA1

69a1b0555660b628d3bbac9711b4ec88d3aed81e
SHA256

e29971fc48aed77c10dbcbb3b98cd5486f00b45f5a6623014b94b6c945e15b5f
SHA512

c9b73c3b0db8bca09f76d461ff5f2808b4861204ac4f2c13a94737b84f0775f740e49c75b2754e52c5f24480ecbc53f695b86e94dd4e7a3f11283903788f03b1
SSDEEP

98304:Eel6aAzZP/rzfIhHOvf/JMBJCZ+GhRmDrRZMjqZ:EelqztIBOvfBAAJ+VZ3Z

Score

N/A

Malware Config

Signatures

Files

5da219f776810a42d8c8e26989f420ece92e87b6279e3bb39dc9627ad0b7f909.zip
.zip

Password: infected
lic-policy-lapse-after-six-months.exe
.exe windows x86

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:b2:37:ae:f2:f4:78:34:4b:b2:df:f6:3a:63:68:a2
Certificate

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

20-09-2022 05:19

Not After

20-09-2023 05:19

Subject

SERIALNUMBER=11908098,CN=Crowded Out Limited,O=Crowded Out Limited,POSTALCODE=TN11 9BH,STREET=Hilden Park House\, 79 Tonbridge Road,L=Hildenborough,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

da:a4:c8:fc:66:b1:48:0d:3e:78:d7:cf:a1:c2:c2:ed:07:ee:d9:96:f3:21:43:82:a3:5e:7a:8d:31:f1:80:db
Signer

Actual PE Digest

da:a4:c8:fc:66:b1:48:0d:3e:78:d7:cf:a1:c2:c2:ed:07:ee:d9:96:f3:21:43:82:a3:5e:7a:8d:31:f1:80:db

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=11908098,CN=Crowded Out Limited,O=Crowded Out Limited,POSTALCODE=TN11 9BH,STREET=Hilden Park House\, 79 Tonbridge Road,L=Hildenborough,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

04-11-2022 15:42
Valid: true

Chain 1

SERIALNUMBER=11908098,CN=Crowded Out Limited,O=Crowded Out Limited,POSTALCODE=TN11 9BH,STREET=Hilden Park House\, 79 Tonbridge Road,L=Hildenborough,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 300.0MB - Virtual size: 300.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

Password: infected

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89Certificate

Extended Key Usages

Key Usages

61:b2:37:ae:f2:f4:78:34:4b:b2:df:f6:3a:63:68:a2Certificate

Extended Key Usages

Key Usages

da:a4:c8:fc:66:b1:48:0d:3e:78:d7:cf:a1:c2:c2:ed:07:ee:d9:96:f3:21:43:82:a3:5e:7a:8d:31:f1:80:dbSigner

Signature Validations

Verification

04-11-2022 15:42 Valid: true

Chain 1

Headers

File Characteristics

Sections

CODE Size: 304KB - Virtual size: 303KB

DATA Size: 1.0MB - Virtual size: 1.0MB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 21KB - Virtual size: 21KB

.rsrc Size: 300.0MB - Virtual size: 300.0MB

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

61:b2:37:ae:f2:f4:78:34:4b:b2:df:f6:3a:63:68:a2
Certificate

da:a4:c8:fc:66:b1:48:0d:3e:78:d7:cf:a1:c2:c2:ed:07:ee:d9:96:f3:21:43:82:a3:5e:7a:8d:31:f1:80:db
Signer

04-11-2022 15:42
Valid: true

CODE
Size: 304KB - Virtual size: 303KB

DATA
Size: 1.0MB - Virtual size: 1.0MB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 300.0MB - Virtual size: 300.0MB