File-Main-Setup[.]zip

Sharing

Copy URL Twitter E-mail

Reason

too many matches

General

Target

File-Main-Setup.zip
Size

2.3MB
MD5

7b34ec4a08467c0df64cedbb07cd538d
SHA1

5b769edf03bfb6c126a8348e25209065117763c7
SHA256

db914e7e0738b95359d1bc0ec8b5c1e8cb5c192b89a5ac0197110ff9e2cefa0f
SHA512

39491ea4357fa5ed51335b4ed60fe9bea0bba54152f613def045048171551f3f7c1665153ecdb64f3d20b1363e9e3991df5c6056e909887bff028323f7736da4
SSDEEP

49152:aclRX+rMo5Z+y/d1I2Ksslc7fPNT5c0w0w2Xk1ukw:LRX+rM+y24cBTK04/w

Score

N/A

Malware Config

Signatures

Files

File-Main-Setup.zip
.zip
File-Main-Setup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

08/12/2020, 14:34

Not After

08/12/2023, 14:34

Subject

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2015, 20:55

Not After

07/07/2025, 20:55

Subject

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

19/07/2020, 00:00

Not After

19/07/2023, 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17/07/2020, 00:00

Not After

17/07/2030, 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bc
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

18/07/2020, 00:00

Not After

18/07/2023, 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16/07/2020, 00:00

Not After

16/07/2030, 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d
Signer

Actual PE Digest

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

26/09/2022, 07:58
Valid: false

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d
Signer

Actual PE Digest

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

26/09/2022, 07:58
Valid: true

Chain 1

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Libs/14YYGZ7FM3S6O4MUZ0Y.dat
Libs/1U65PS1BVQECFQAIC4A.bin
Libs/2VYVR04SDPF3IS71T.dll
Libs/32IERCBP.bin
Libs/3G9HR5P7CRVS50.dat
Libs/419FC7WGL8U8ZSYPT.bin
Libs/4SSCFOJ.dat
Libs/4V6I4TP3QQIQA9JR.dll
Libs/56WIJZ7RPD2ZBOOAMQQ.dll
Libs/5XMTLP2.dat
Libs/63771.dat
Libs/67CFFM3B725EGYE.bin
Libs/6G6OO2EXS3IPMFRB.bin
Libs/72XCK.bin
Libs/7P6XKONAB3Z1G9V4IT.bin
Libs/7Z9YR8EUA1.bin
Libs/9IGMCJPTCF.dll
Libs/9J3SMPZYL4A7DT.dat
Libs/9M39RHL6SEN7VE.bin
Libs/9VLL9EVQI.dll
Libs/AYN6D3VLI47U.bin
Libs/BBT6KAVB38NFYUOP393.dll
Libs/BH1K36XK2M29VV040PT.dat
Libs/C7HHD1.dll
Libs/CURJVTTAZ.bin
Libs/CZIPO1.dll
Libs/D327SV9PGRGJWWD5N.dat
Libs/D5H7PIR1BZXPEA0.dll
Libs/DB6XLSHV.dat
Libs/E482XC79VTFZ8IOJH.dat
Libs/EKQ22UW6H031CGY.dat
Libs/ETVI7N.bin
Libs/F5IDDK74JGGOTRH0G.dll
Libs/FOMO9BRP9S.dll
Libs/FTJVJFCPY9.bin
Libs/GC4B0HDO9LH2YYDE.bin
Libs/GODDGEB5L4VAGF1HO4C.bin
Libs/HC6ROSLW8T9BU.dll
Libs/HCO2BLWL65TW5672KP7.bin
Libs/HCTTJ.bin
Libs/HRZOWTD77M30HABR.dll
Libs/I30IEIJWR21B.dat
Libs/I4THSTYY6R7A2.dll
Libs/J4QY5.dat
Libs/J7V5YDPIC.bin
Libs/J9DZOR0I.dll
Libs/JE4ZSK5TG.dat
Libs/JJHQTQYPHQD14.dll
Libs/JS2P2I7VB56DQBS2D.dat
Libs/LGWNMMO.dll
Libs/LMZLEDC6JT7.dll
Libs/N0IKIMSSKI3.dll
Libs/N8BGLDBEOW79P5R9.dll
Libs/NXO3IYBJ5NLEXH.dll
Libs/O1QCE2.dat
Libs/OIMZ0NTBF.dat
Libs/OV9LF8MQ.dll
Libs/OVW9K5OMR5O7QL.bin
Libs/QDY5LIGNE.dat
Libs/QI9DSNO0SNKBCUI.dat
Libs/QPJE856WNJV1Q.dat
Libs/R75JYX31N5O.bin
Libs/SHPCLIVNIJCWWY.bin
Libs/SNB1FHCFCWPIZ61L.bin
Libs/TMO1W8CWGLT.bin
Libs/TVF3BU8K4STLNH.dll
Libs/TZM1Z6D54Q37B2.dat
Libs/UMSLRHY2UK081.bin
Libs/UZT0JKP.dll
Libs/WPS5GHWXXDVC0EW9T.bin
Libs/X3U1MGBXC.dll
Libs/XVMAI42TVMXQT6LDJS.dll
Libs/XVZMLP7RX37Z8I.dat
Libs/Y2IGVLD6QUN9MR9R1.bin
Libs/Y61II0YJTRA2.dat
Libs/Y9MTTZNH7.dll
Libs/YN54EL.dll
Libs/YQKJI08LGXNJXAG2H.dat
Libs/YWLUWAJS6.dll
Libs/ZINFL1Y.dll

Sharing

Errors

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07Certificate

Extended Key Usages

Key Usages

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42Certificate

Extended Key Usages

Key Usages

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22Certificate

Extended Key Usages

Key Usages

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8Certificate

Extended Key Usages

Key Usages

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bcCertificate

Extended Key Usages

Key Usages

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38Certificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0dSigner

Signature Validations

Verification

26/09/2022, 07:58 Valid: false

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0dSigner

Signature Validations

Verification

26/09/2022, 07:58 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 329KB - Virtual size: 329KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 512B - Virtual size: 12B

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07
Certificate

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Certificate

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22
Certificate

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bc
Certificate

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d
Signer

26/09/2022, 07:58
Valid: false

f9:0b:b7:f8:2f:05:bb:0a:33:e2:cd:d6:af:5b:8c:ba:40:9d:73:d0:55:10:13:ad:29:e5:e8:e2:94:89:9d:0d
Signer

26/09/2022, 07:58
Valid: true

.text
Size: 329KB - Virtual size: 329KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 512B - Virtual size: 12B