best-thing-to-summon-wiht-conjure-animals[.]zip

Resubmissions

30/01/2023, 11:39

230130-nsgnzabg81 8

18/12/2022, 14:26

221218-rrz1psfb6x 8

Sharing

Copy URL Twitter E-mail

General

Target

best-thing-to-summon-wiht-conjure-animals.zip
Size

3.3MB
MD5

441d975ee3e850966711b4738c33e715
SHA1

d82a86b356573d1f60a13cefaa817eb9110d0163
SHA256

28e6a87fcb5c3bb512aad9f3f47f8d0bbdfd3e37c6ed7f565d762a7cfd9b6d36
SHA512

06e68fd14f78c337319a84e602130e6eecc0e714dddcd5bcdddff69fa862d33175a61cf4de6804f991338c15e0790b641044c6110af974077c10ea7c976da3ce
SSDEEP

49152:Bufkah7nwSKgj0Ch65zz8dOS/TfH55Ot31FijNsL6iOG2HYKA7P7FuKf0OQQKir7:Y5wSpjh6SLCgiOG2HYCQHKYAxxzI

Score

N/A

Malware Config

Signatures

Files

best-thing-to-summon-wiht-conjure-animals.zip
.zip

Password: infected
best-thing-to-summon-wiht-conjure-animals.exe
.exe windows x86

Password: infected

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2020, 00:00

Not After

18/03/2045, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:df:9f:57:3f:50:44:aa:22:cf:e9:38
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

10/11/2022, 16:30

Not After

11/11/2023, 16:30

Subject

SERIALNUMBER=1007117-0,CN=CHARLES DOUGALL CONSULTING INC.,O=CHARLES DOUGALL CONSULTING INC.,STREET=56 RAINSFORD RD,L=Toronto,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9
Signer

Actual PE Digest

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=1007117-0,CN=CHARLES DOUGALL CONSULTING INC.,O=CHARLES DOUGALL CONSULTING INC.,STREET=56 RAINSFORD RD,L=Toronto,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

20/01/2023, 16:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 878KB - Virtual size: 877KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 299.1MB - Virtual size: 299.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8Certificate

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

16:df:9f:57:3f:50:44:aa:22:cf:e9:38Certificate

Extended Key Usages

Key Usages

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9Signer

Signature Validations

Verification

20/01/2023, 16:00 Valid: false

Headers

File Characteristics

Sections

CODE Size: 304KB - Virtual size: 303KB

DATA Size: 878KB - Virtual size: 877KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 21KB - Virtual size: 21KB

.rsrc Size: 299.1MB - Virtual size: 299.1MB

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

16:df:9f:57:3f:50:44:aa:22:cf:e9:38
Certificate

8b:5d:c3:d0:57:ca:48:89:03:b7:8d:db:90:6c:e1:a3:de:84:fe:e9
Signer

20/01/2023, 16:00
Valid: false

CODE
Size: 304KB - Virtual size: 303KB

DATA
Size: 878KB - Virtual size: 877KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 299.1MB - Virtual size: 299.1MB