TaskbarSystem[.]exe[.]7z

Target

TaskbarSystem.exe.7z
Size

26KB
MD5

ea0d09305b001d721f8a7956a8e950c0
SHA1

130dd07bf3316ac7b943f3ffeee4ecf794faa6a0
SHA256

3f938236c5d271c092b0259a45e09eb9c894d3656773934665cda9b306a6e2ed
SHA512

76727cc32b2de11e20249ec42551d4bbc51e0e74e57ee4f3b35fefac75d2f910c51311cc63b9cc59b2d3405afc371944abffce083722922db27f8aa76af99572
SSDEEP

768:IA9a4sRATWdzMLn0PBi/yxRxcrolRu/8Cv7SZ:IA9LsRzeLgS8cmR88O8

Score

N/A

Malware Config

Signatures

Files

TaskbarSystem.exe.7z
.7z

Password: infected
TaskbarSystem.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:fe
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/08/2020, 00:00

Not After

07/07/2021, 12:00

Subject

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:fe
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/08/2020, 00:00

Not After

07/07/2021, 12:00

Subject

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:a1:80:d1:1b:08:81:fc:f9:b2:dd:89:b5:49:fa:43:a1:ef:47:dc:11:f7:38:69:b7:22:21:e3:61:eb:fb:60
Signer

Actual PE Digest

4a:a1:80:d1:1b:08:81:fc:f9:b2:dd:89:b5:49:fa:43:a1:ef:47:dc:11:f7:38:69:b7:22:21:e3:61:eb:fb:60

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

20/05/2021, 06:03
Valid: true

Chain 1

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

ee:0f:bc:c8:46:83:ea:55:4b:a6:9f:33:36:9d:0c:15:d0:65:76:55
Signer

Actual PE Digest

ee:0f:bc:c8:46:83:ea:55:4b:a6:9f:33:36:9d:0c:15:d0:65:76:55

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

20/05/2021, 06:03
Valid: true

Chain 1

CN=Globalhop Ltd TOO,O=Globalhop Ltd TOO,L=Almaty,C=KZ

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:feCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:feCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

4a:a1:80:d1:1b:08:81:fc:f9:b2:dd:89:b5:49:fa:43:a1:ef:47:dc:11:f7:38:69:b7:22:21:e3:61:eb:fb:60Signer

Signature Validations

Verification

20/05/2021, 06:03 Valid: true

Chain 1

ee:0f:bc:c8:46:83:ea:55:4b:a6:9f:33:36:9d:0c:15:d0:65:76:55Signer

Signature Validations

Verification

20/05/2021, 06:03 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 601KB - Virtual size: 600KB

.rsrc Size: 283KB - Virtual size: 283KB

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:fe
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0d:f8:65:4b:1e:25:2e:5e:8c:71:e0:cb:a3:66:6f:fe
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

4a:a1:80:d1:1b:08:81:fc:f9:b2:dd:89:b5:49:fa:43:a1:ef:47:dc:11:f7:38:69:b7:22:21:e3:61:eb:fb:60
Signer

20/05/2021, 06:03
Valid: true

ee:0f:bc:c8:46:83:ea:55:4b:a6:9f:33:36:9d:0c:15:d0:65:76:55
Signer

20/05/2021, 06:03
Valid: true

.text
Size: 601KB - Virtual size: 600KB

.rsrc
Size: 283KB - Virtual size: 283KB

.reloc
Size: 512B - Virtual size: 12B