SoftwareSetupMain[.]zip

Sharing

Copy URL Twitter E-mail

Reason

too many matches

General

Target

SoftwareSetupMain.zip
Size

2.5MB
MD5

77c21e702980d7ae7906333b55bba009
SHA1

20e54417a6143c7d84184fc480c6b87c3c7d4349
SHA256

94e15d0ef639a55f6b56d8cbb826cdc02e6668cafbd66147870011e70ac7f6aa
SHA512

7a4df2ed5561f1440f4344e6ee5075651dfdc36d80b8a5a4ab0c3d25a45e66837485b018f8aa8257795ecae08eb9b45a55d80396ff78768abdf2fff104d9399d
SSDEEP

49152:Zw1dlyHlsuYWSAXZL11wHN1qZRu3j0Bt8XrD6oSjN:Zw1detYWxl4bqYz0fEZSjN

Score

N/A

Malware Config

Signatures

Files

SoftwareSetupMain.zip
.zip
SoftwareSetupMain.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

08/12/2020, 14:34

Not After

08/12/2023, 14:34

Subject

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2015, 20:55

Not After

07/07/2025, 20:55

Subject

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

19/07/2020, 00:00

Not After

19/07/2023, 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17/07/2020, 00:00

Not After

17/07/2030, 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bc
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

18/07/2020, 00:00

Not After

18/07/2023, 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16/07/2020, 00:00

Not After

16/07/2030, 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08
Signer

Actual PE Digest

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

26/09/2022, 07:58
Valid: false

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08
Signer

Actual PE Digest

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

26/09/2022, 07:58
Valid: true

Chain 1

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 469KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dll/02LN4L.bin
dll/0ZBE5M3AI6TTEE9F5CF.bin
dll/1E1YTNFU7D56F38DO.dat
dll/21UK82S9.dat
dll/23X0E3POH.dat
dll/2P1UG3EAJTSDTTZCD0.dll
dll/3P0S65O6GBJKG4.dat
dll/47GTFN.dat
dll/4EK2RHY.dat
dll/4LKC5XPGH.bin
dll/4QRBN2EG1NTY.dat
dll/5MPAZV811DFOMQTL.bin
dll/5PLG8.dll
dll/5QJOOTBR.dll
dll/63QFSFS55G4BJ.bin
dll/6J25MAOT.bin
dll/6KADGDRWO4D7.dll
dll/6QC1SB9SUPOP5F.bin
dll/7GDWJI236WE.dll
dll/7LMXM6DQTH85E.bin
dll/8R8L36ARB3K.dat
dll/8ZISCPQZ6SV9Y8Q.dat
dll/9WWKAA6XN3M6V8MGP7.dat
dll/ABON9IWQ505LEWE.dat
dll/AH9Q5.bin
dll/B4PKMM4TJ.bin
dll/BSZW2IOS4G.dat
dll/BUE3M7OKAZMAE11HY5Y.dll
dll/BW8YEF.bin
dll/BXWWJX5OW4JY.dat
dll/CD75OSCIFM9MBX.bin
dll/CP515CDYJ.dll
dll/D891VX.dll
dll/DAQFDD33OAEH1JBKK.bin
dll/DNX7EU6K8BB.bin
dll/DRDB2SYXGDUWZ11.dll
dll/DY02Y9HGFJ5R7E43W9.dat
dll/EERD8EDMELEFOES.bin
dll/EY1RMNY2J.dll
dll/F935WIEF7Z3KTHU4CL.dat
dll/FAQVVOD08IJEU.dat
dll/FOBKFLKSDFL9LCQDX8.dll
dll/G1OM359.bin
dll/GCMKFQSY.dat
dll/GFFKOC0TJ61I2OOVVN.dat
dll/GTG8KDUS91ZPKK2HT.dat
dll/HPF2D.bin
dll/I5T4KQ.bin
dll/IAYK8SU2NDHS04SCK8Z.bin
dll/ICVMY.dat
dll/ILMSSQ1IF.dll
dll/J3QEQ8M.bin
dll/J6TSW9XQLBS.dat
dll/K3GVQM.dat
dll/KOC3GR9H87ID.dll
dll/L199YMUEEVKT6WYF.dat
dll/L9J6UWVYGBS2K.dll
dll/N65UK9Y7K3CDEN7GY4.dll
dll/NQ0SI0.dll
dll/OAIU9Z54EPOI3JNLZ.dat
dll/OCFZ0GGZ.dll
dll/OFAZT.dat
dll/OQ2QKVM.bin
dll/PH3JR5UZCFYEL1A.dat
dll/Q1I79JUGG388H3XBQ.bin
dll/R1VFG3J.dll
dll/RUIOMI9856NQZ8.dll
dll/S0ITCXUGOM.dll
dll/SJZX3RX8.dll
dll/SZ3Q71VH.dll
dll/TE5S9TH8.bin
dll/TEUHD8LPJCJAATLQUHF.dat
dll/TIF7VBQ6S1XW54HY.bin
dll/TQXFYR.bin
dll/TVVRU.dat
dll/TWDP2C08YOBXXA.dat
dll/UB489.dat
dll/URC2XLELP.dll
dll/UWA3KDTGMTKRH9JO3.dat
dll/UZCWPGS.bin
dll/V0RUWG0MRODL.dll
dll/VQRA5KLT.dll
dll/VUYBOT51TASE6.dat
dll/VYAQGV77T.dat
dll/W3UHELTHYKZ1HTW4TO2.dll
dll/WE86I47U.dat
dll/WF84KTQ0J2KQBSAWZ.dat
dll/WP9T9S.dat
dll/XJS0XJJ.bin
dll/XTR325U7EFMM5HDK6.bin
dll/Z22NZNQCFP.dll
dll/Z3MG39.dat
dll/Z948M27H5VNHSSGI.bin
dll/ZD3YNZNG0V59U.dat

Sharing

Errors

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07Certificate

Extended Key Usages

Key Usages

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42Certificate

Extended Key Usages

Key Usages

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22Certificate

Extended Key Usages

Key Usages

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8Certificate

Extended Key Usages

Key Usages

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bcCertificate

Extended Key Usages

Key Usages

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38Certificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08Signer

Signature Validations

Verification

26/09/2022, 07:58 Valid: false

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08Signer

Signature Validations

Verification

26/09/2022, 07:58 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 469KB - Virtual size: 469KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 512B - Virtual size: 12B

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07
Certificate

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Certificate

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22
Certificate

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bc
Certificate

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08
Signer

26/09/2022, 07:58
Valid: false

d3:69:03:23:a5:6c:0c:12:0e:81:21:14:80:ca:e0:53:10:a9:d9:20:89:ec:7c:6a:35:2e:6a:b6:e9:13:aa:08
Signer

26/09/2022, 07:58
Valid: true

.text
Size: 469KB - Virtual size: 469KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 512B - Virtual size: 12B