8656249219[.]zip

Resubmissions

09/01/2023, 14:53

230109-r9d6ysef27 8

09/01/2023, 14:33

230109-rw2p4aaa6s 1

Sharing

Copy URL Twitter E-mail

General

Target

8656249219.zip
Size

23.8MB
MD5

2863ae19f2f16366bbe70b31c012e2bf
SHA1

31a69e09e9907f8c62a37b7ca62b14ae2e1d8d81
SHA256

9accf893e84c503dd5aaca763ad60b952a17e14af4284420b021a73d87eddd45
SHA512

7b6595aacdb74daed6ffdcdca6cf03c3e64c261a2353954580555557d14fc902fbbf5300664ffd21ba988979a3a154b8358c7b83bb3429910c43f77175c2da40
SSDEEP

393216:VwN6xn2Z+waeriVYSsy3zUDtAqdhzkk+C1KF9/bcCgyhm2kOb80qK1P743z+rOjP:VwGn2IBerifepAupMfRvhb80d7zrOD

Score

N/A

Malware Config

Signatures

Files

8656249219.zip
.zip

Password: infected
51be887c3f947822500913614572e69e0a798b7d5a30891fe31bb25c589d680d
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

41:bb:4f:1f:ed:13:b0:a3:38:98:36:80:c3:55:f4:0f:22:88:a5:c3
Certificate

Issuer

CN=APTX Software

Not Before

22/12/2022, 09:09

Not After

19/12/2032, 09:09

Subject

CN=APTX Software

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

06:b9:1b:92:39:2d:7c:f9:41:fe:78:25:1f:1e:95:3d:df:66:b4:8d
Signer

Actual PE Digest

06:b9:1b:92:39:2d:7c:f9:41:fe:78:25:1f:1e:95:3d:df:66:b4:8d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=APTX Software

15/12/2022, 13:59
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24.0MB - Virtual size: 24.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

41:bb:4f:1f:ed:13:b0:a3:38:98:36:80:c3:55:f4:0f:22:88:a5:c3Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

06:b9:1b:92:39:2d:7c:f9:41:fe:78:25:1f:1e:95:3d:df:66:b4:8dSigner

Signature Validations

Verification

15/12/2022, 13:59 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 24.0MB - Virtual size: 24.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

41:bb:4f:1f:ed:13:b0:a3:38:98:36:80:c3:55:f4:0f:22:88:a5:c3
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

06:b9:1b:92:39:2d:7c:f9:41:fe:78:25:1f:1e:95:3d:df:66:b4:8d
Signer

15/12/2022, 13:59
Valid: false

.text
Size: 24.0MB - Virtual size: 24.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B