2267fac6e4bcace94d9ed232cc4ba7e128424e80c5730ea38f23610c11bdc168[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

2267fac6e4bcace94d9ed232cc4ba7e128424e80c5730ea38f23610c11bdc168.zip
Size

645KB
MD5

b5041a84e558a00f7d2dcb43fd2ce388
SHA1

861dc6334beff257034afa35b84fda176946bedc
SHA256

6be56dd56ec252564c301fef4f5358ec3be73204292e12ec3dc9bf1cf82da0f8
SHA512

db078a9058d6d13ce2102fc4947504ad5e739c2518150f4403e3a1c253cc7ca406ff8f2bbf87edb0f70726eaaf48195402459b4c88eb99dd0977f03b8f4febcb
SSDEEP

12288:/J6TFQrRcqA6ihOVwX7wCoYWzt62DYGW7gvD9tlX3W4OSMy11TPKN3xoC:/JO2rRcGGDolh6oYvuDXtMyLPE

Score

N/A

Malware Config

Signatures

Files

2267fac6e4bcace94d9ed232cc4ba7e128424e80c5730ea38f23610c11bdc168.zip
.zip

Password: infected
2267fac6e4bcace94d9ed232cc4ba7e128424e80c5730ea38f23610c11bdc168.exe
.exe windows x64

Password: infected

Code Sign

ee:26:f7:f0:d6:bf:08:39:cb:b5:4b:8a:6d:47:ab:73
Certificate

Issuer

CN=Indtallrox Ltd Inc\ ,C=CN

Not Before

04-01-2023 18:49

Not After

04-01-2024 18:49

Subject

CN=Indtallrox Ltd Inc\ ,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:92:94:70:a5:9b:a9:a9:aa:43:d1:47:6a:c5:1e:bf:a4:38:1f:dd:28:72:3c:90:49:49:8d:ec:33:f7:7e:93
Signer

Actual PE Digest

78:92:94:70:a5:9b:a9:a9:aa:43:d1:47:6a:c5:1e:bf:a4:38:1f:dd:28:72:3c:90:49:49:8d:ec:33:f7:7e:93

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Indtallrox Ltd Inc\ ,C=CN

15-12-2022 13:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

ee:26:f7:f0:d6:bf:08:39:cb:b5:4b:8a:6d:47:ab:73Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

78:92:94:70:a5:9b:a9:a9:aa:43:d1:47:6a:c5:1e:bf:a4:38:1f:dd:28:72:3c:90:49:49:8d:ec:33:f7:7e:93Signer

Signature Validations

Verification

15-12-2022 13:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 3KB - Virtual size: 2KB

ee:26:f7:f0:d6:bf:08:39:cb:b5:4b:8a:6d:47:ab:73
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

78:92:94:70:a5:9b:a9:a9:aa:43:d1:47:6a:c5:1e:bf:a4:38:1f:dd:28:72:3c:90:49:49:8d:ec:33:f7:7e:93
Signer

15-12-2022 13:55
Valid: false

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 3KB - Virtual size: 2KB