best-thing-to-summon-wiht-conjure-animals[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

best-thing-to-summon-wiht-conjure-animals.zip
Size

3.3MB
MD5

e523289bf3f322103fa0db4805f36a91
SHA1

4a9e9044b9c71e8fae9ba4b1c0ff0b03e5b7175d
SHA256

dcb8adf96e4728cef81d383fca66936b4a332257d6a3b700179d182e2a12555c
SHA512

7a9c05a8db7674470663d2efc38c45c6423f58530390306aaf6ff15e37fc78381935c350857c515793b20323a14e19fee3857677b6897e255696952313f36f19
SSDEEP

24576:uXk7mjWDanTpDD1g6SqoZF9NqOlb9mjQTMkvNgnOgyFyoOeoUD6o:u0gWutDD7Sqonq+9mjoMk2ODFyoBoUDP

Score

N/A

Malware Config

Signatures

Files

best-thing-to-summon-wiht-conjure-animals.zip
.zip
best-thing-to-summon-wiht-conjure-animals.exe
.exe windows x86

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2020, 00:00

Not After

18/03/2045, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:df:9f:57:3f:50:44:aa:22:cf:e9:38
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

10/11/2022, 16:30

Not After

11/11/2023, 16:30

Subject

SERIALNUMBER=1007117-0,CN=CHARLES DOUGALL CONSULTING INC.,O=CHARLES DOUGALL CONSULTING INC.,STREET=56 RAINSFORD RD,L=Toronto,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9
Signer

Actual PE Digest

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=1007117-0,CN=CHARLES DOUGALL CONSULTING INC.,O=CHARLES DOUGALL CONSULTING INC.,STREET=56 RAINSFORD RD,L=Toronto,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15/12/2022, 14:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 878KB - Virtual size: 877KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 299.1MB - Virtual size: 299.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8Certificate

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

16:df:9f:57:3f:50:44:aa:22:cf:e9:38Certificate

Extended Key Usages

Key Usages

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9Signer

Signature Validations

Verification

15/12/2022, 14:00 Valid: false

Headers

File Characteristics

Sections

CODE Size: 304KB - Virtual size: 303KB

DATA Size: 878KB - Virtual size: 877KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 21KB - Virtual size: 21KB

.rsrc Size: 299.1MB - Virtual size: 299.1MB

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

16:df:9f:57:3f:50:44:aa:22:cf:e9:38
Certificate

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9
Signer

15/12/2022, 14:00
Valid: false

CODE
Size: 304KB - Virtual size: 303KB

DATA
Size: 878KB - Virtual size: 877KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 299.1MB - Virtual size: 299.1MB