ScriptWareInstallerNA[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ScriptWareInstallerNA.exe
Size

1.3MB
MD5

0e42ed4159ae14b7bc65de029c16c5b4
SHA1

463db1b8e95bb090992e470d966d43b3e59b37d0
SHA256

b08aa68a51ea84b2493a15512f153c0c6c1ef815a9d330ff5be0891995538a08
SHA512

5f00a994eecc5dd82f4fec791ed24269bfbc0e1c8daad5b439d814d6e2cae932a429e77a1a9bb905f07dc235124c228540800579226bb259ecda1c38e5601cad
SSDEEP

24576:Af3DOoUWhdoNLLJpTmJG/Olrvn++Sib5h5N4bSRaCUsvp1umBzAN3DedwlYvNExK:aSoU2siG/Ai+S+v4GR51BzANyClY1ExK

Score

N/A

Malware Config

Signatures

Files

ScriptWareInstallerNA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:ae:3c:45:d7:93:87:6b:38:aa:84:ce:3c:23:29:c9
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10/07/2021, 23:31

Not After

09/07/2023, 23:31

Subject

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:38:63:bc:7c:01:dd:03:7e:16:97:ad:ce:ed:80:44
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

01/10/2020, 17:04

Not After

29/09/2030, 17:04

Subject

CN=SSL.com Timestamping Unit 2020,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:d0:a2:64:bc:40:66:91:80:8a:87:33:00:95:ac:d5:57:71:af:d2:c7:e1:0b:d6:fa:76:4a:a7:9b:10:7d:eb
Signer

Actual PE Digest

b6:d0:a2:64:bc:40:66:91:80:8a:87:33:00:95:ac:d5:57:71:af:d2:c7:e1:0b:d6:fa:76:4a:a7:9b:10:7d:eb

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

25/10/2021, 20:38
Valid: true

Chain 1

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Chain 2

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

1d:ae:3c:45:d7:93:87:6b:38:aa:84:ce:3c:23:29:c9Certificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

31:38:63:bc:7c:01:dd:03:7e:16:97:ad:ce:ed:80:44Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

b6:d0:a2:64:bc:40:66:91:80:8a:87:33:00:95:ac:d5:57:71:af:d2:c7:e1:0b:d6:fa:76:4a:a7:9b:10:7d:ebSigner

Signature Validations

Verification

25/10/2021, 20:38 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 12B

64:33:51:d3:c7:38:9f:08
Certificate

1d:ae:3c:45:d7:93:87:6b:38:aa:84:ce:3c:23:29:c9
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

31:38:63:bc:7c:01:dd:03:7e:16:97:ad:ce:ed:80:44
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

b6:d0:a2:64:bc:40:66:91:80:8a:87:33:00:95:ac:d5:57:71:af:d2:c7:e1:0b:d6:fa:76:4a:a7:9b:10:7d:eb
Signer

25/10/2021, 20:38
Valid: true

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 12B