4[.]zip | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

4.zip
Size

4.2MB
MD5

c7b63ba54605010ecce3cc0e7e47b172
SHA1

e3477f48003aebbe684e79ba4bd3727107d3daf0
SHA256

4caa991d1cb22a7e09c3c1be216b08527002c9d11821e57753eb7ff7644133f3
SHA512

73e791e6da1b03428d1fcfe252e9911c21ff6d44362e11f1d5b798d926484eedc67d3788a66c6a5321811682db146322aa1f065aa10bd79251ece5f2c78bc524
SSDEEP

98304:+8tPwtSELMTaFw4IFv8QIpdgv6ErgM5dGBi6pq0sCnMY:pRwtSRa+4IeQSgSErgudGA6p2pY

Score

N/A

Malware Config

Signatures

Files

4.zip
.zip
ChromiumUpdate.iso
.iso
ChromiumUpdate.exe
.exe windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:1b:46:83:93:ef:1c:2d:61:ca:b0:e0:d5:1d:70:13:2d:c7:6c:8e:da:7c:0a:16:d1:77:f0:6a:a1:5f:20:c1
Signer

Actual PE Digest

9f:1b:46:83:93:ef:1c:2d:61:ca:b0:e0:d5:1d:70:13:2d:c7:6c:8e:da:7c:0a:16:d1:77:f0:6a:a1:5f:20:c1

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 13:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 39KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pppbtwdd
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pwmgldce
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

9f:1b:46:83:93:ef:1c:2d:61:ca:b0:e0:d5:1d:70:13:2d:c7:6c:8e:da:7c:0a:16:d1:77:f0:6a:a1:5f:20:c1Signer

Signature Validations

Verification

15/12/2022, 13:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 39KB - Virtual size: 96KB

.rsrc Size: 24KB - Virtual size: 109KB

.idata Size: 512B - Virtual size: 8KB

Size: 512B - Virtual size: 4.5MB

pppbtwdd Size: 3.4MB - Virtual size: 3.4MB

pwmgldce Size: 512B - Virtual size: 8KB

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

9f:1b:46:83:93:ef:1c:2d:61:ca:b0:e0:d5:1d:70:13:2d:c7:6c:8e:da:7c:0a:16:d1:77:f0:6a:a1:5f:20:c1
Signer

15/12/2022, 13:51
Valid: false

.rsrc
Size: 24KB - Virtual size: 109KB

.idata
Size: 512B - Virtual size: 8KB

pppbtwdd
Size: 3.4MB - Virtual size: 3.4MB

pwmgldce
Size: 512B - Virtual size: 8KB