ADOBE ILLUSTRATOR CRACK[.]malware

Sharing

Copy URL Twitter E-mail

General

Target

ADOBE ILLUSTRATOR CRACK.malware
Size

384.1MB
MD5

a1b13aae1e72f3ab21a99f3fd562514d
SHA1

7ff50a3876ea65eba0a6f91cad9b35e656c22c60
SHA256

469b9cfe5482ad06f8f6dfebfd3aae521bf59e2b0413eb4ab7b273dc4de141dc
SHA512

ade980b01f924cd4ca57ea60ad0bb6a7e5278792b6b7b1ab326581d0b7bf5351471562821c16718d5d350da1ad384a6c94388cef1a28474e107809195122819d
SSDEEP

49152:Pg24Z4DOOnLisoOvThXu98/4UaMC+qR2YdUvzaUSGJZ:Pg24Z4DOOnLisoOvTKX9dUvzi0Z

Score

N/A

Malware Config

Signatures

Files

ADOBE ILLUSTRATOR CRACK.malware
.exe windows x86

a8e0f71bec433fe03574cc9d278b7fff

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

14/05/2018, 10:58

Not After

14/05/2021, 10:58

Subject

SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:41:2e:f1:9b:db:0f:98:7c:2a:17:fc:65:8d:6e:33:40:2e:3b:2d:1c:b8:91:5e:64:fd:2d:fb:db:78:b4:77
Signer

Actual PE Digest

ac:41:2e:f1:9b:db:0f:98:7c:2a:17:fc:65:8d:6e:33:40:2e:3b:2d:1c:b8:91:5e:64:fd:2d:fb:db:78:b4:77

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

28/04/2021, 13:51
Valid: true

Chain 1

SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

DefWindowProcW

advapi32

RegisterEventSourceA

comctl32

DSA_Create

mscoree

_CorExeMain

shell32

SHGetIconOverlayIndexA

Sections

.gfids
Size: - Virtual size: 240KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8e0f71bec433fe03574cc9d278b7fff

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4dCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ac:41:2e:f1:9b:db:0f:98:7c:2a:17:fc:65:8d:6e:33:40:2e:3b:2d:1c:b8:91:5e:64:fd:2d:fb:db:78:b4:77Signer

Signature Validations

Verification

28/04/2021, 13:51 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

mscoree

shell32

Sections

.gfids Size: - Virtual size: 240KB

.reloc Size: 512B - Virtual size: 4KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.itext Size: 101KB - Virtual size: 104KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ac:41:2e:f1:9b:db:0f:98:7c:2a:17:fc:65:8d:6e:33:40:2e:3b:2d:1c:b8:91:5e:64:fd:2d:fb:db:78:b4:77
Signer

28/04/2021, 13:51
Valid: true

.gfids
Size: - Virtual size: 240KB

.reloc
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.itext
Size: 101KB - Virtual size: 104KB