setup_win64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

setup_win64.zip
Size

7.4MB
MD5

26471fd5c21f2a805d93a350324c816a
SHA1

0f173c8654f48ac1eb41a63c9b66cf9b2343f319
SHA256

a010af554865978b7692fa6494c8ba11098ff18759360558e87aa8dc8eb6af9f
SHA512

e5f07c8a315eb6f5104f89e89c3e8ede804abb313e5e45b605e4909f23a87d4df7b3ae023241f60e9be1afedf7f5c3f0cace1ecc6a6d061039388f4c54bd3b76
SSDEEP

196608:gxyvMIXhfhhNCSoOTU0F0GR/uBtERQ+cqUBhKp4R:g+NXhfhnCSoO9RkORNcsmR

Score

1^/10

Malware Config

Signatures

Files

setup_win64.zip
.zip
resourse/Lang/azumbre.xml
.xml
resourse/Lang/bipedalMinisubClatsop.xml
.xml
resourse/Lang/echoistVacance.xml
.xml
resourse/Lang/fluther.xml
.xml
resourse/Lang/frapsBearersGored.xml
.xml
resourse/Lang/gawkersDurry.xml
.xml
resourse/Lang/imbibesOutechoGrannam/asilus.xml
.xml
resourse/Lang/imbibesOutechoGrannam/azuline.xml
.xml
resourse/Lang/imbibesOutechoGrannam/bailiff.xml
.xml
resourse/Lang/imbibesOutechoGrannam/boosy.xml
.xml
resourse/Lang/imbibesOutechoGrannam/gelosin.xml
.xml
resourse/Lang/imbibesOutechoGrannam/gloveBorideAlphean.xml
.xml
resourse/Lang/imbibesOutechoGrannam/lucigenFleetenGravity.xml
.xml
resourse/Lang/imbibesOutechoGrannam/orlesMalurus.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/banyansRadomesPedante.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/gidsWartyClamer.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/quicaCembaliPommard.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/rongaFloatsUnwaxed.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/sciniph.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/septumMuletHopeite.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/tantiCatjangOrdinar.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/tokens.xml
.xml
resourse/Lang/imbibesOutechoGrannam/provine/viaticCotuitFossed.xml
.xml
resourse/Lang/imbibesOutechoGrannam/reitEadish.xml
.xml
resourse/Lang/imbibesOutechoGrannam/rindlePoohSuperb.xml
.xml
resourse/Lang/imbibesOutechoGrannam/rouelleShawnyTrains.xml
.xml
resourse/Lang/imbibesOutechoGrannam/subtly.xml
.xml
resourse/Lang/imbibesOutechoGrannam/sulfids.xml
.xml
resourse/Lang/libel/bovistaBriardsTeared.xml
.xml
resourse/Lang/libel/denty.xml
.xml
resourse/Lang/libel/gasbags.xml
.xml
resourse/Lang/libel/leonardBibio/cienegaPunnedAzilian.xml
.xml
resourse/Lang/libel/leonardBibio/dueness.xml
.xml
resourse/Lang/libel/leonardBibio/hokiestWallah.xml
.xml
resourse/Lang/libel/leonardBibio/oboes.xml
.xml
resourse/Lang/libel/leonardBibio/rumbHaine.xml
.xml
resourse/Lang/libel/leonardBibio/shylockAdmass.xml
.xml
resourse/Lang/libel/leonardBibio/sugars.xml
.xml
resourse/Lang/libel/leonardBibio/terreneIwwortJahve.xml
.xml
resourse/Lang/libel/leonardBibio/vagantiOzotypeDainful.xml
.xml
resourse/Lang/libel/moundRumkin.xml
.xml
resourse/Lang/libel/netting.xml
.xml
resourse/Lang/libel/ramilie.xml
.xml
resourse/Lang/libel/spatterArmida.xml
.xml
resourse/Lang/libel/stauter.xml
.xml
resourse/Lang/libel/tahrsFlareUndular.xml
.xml
resourse/Lang/libel/tuckySoumMopeder.xml
.xml
resourse/Lang/libel/winkleBienttCumara/beweepsLaenFetish.xml
.xml
resourse/Lang/libel/winkleBienttCumara/bivaneTorgot.xml
.xml
resourse/Lang/libel/winkleBienttCumara/broggleDotePtelea.xml
.xml
resourse/Lang/libel/winkleBienttCumara/culmenEclogueParol.xml
.xml
resourse/Lang/libel/winkleBienttCumara/floeBeaky.xml
.xml
resourse/Lang/libel/winkleBienttCumara/genuaBodicesCalahan.xml
.xml
resourse/Lang/libel/winkleBienttCumara/heliaeaRusting.xml
.xml
resourse/Lang/libel/winkleBienttCumara/nofile.xml
.xml
resourse/Lang/libel/winkleBienttCumara/ojibwayEpicism.xml
.xml
resourse/Lang/libel/winkleBienttCumara/ruskinOutdidStudded.xml
.xml
resourse/Lang/libel/winkleBienttCumara/upbrowAftersLunk.xml
.xml
resourse/Lang/libel/wiwi.xml
.xml
resourse/Lang/luging.xml
.xml
resourse/Lang/ouphe/adieuBasalGirdles.xml
.xml
resourse/Lang/ouphe/beany/barvelReestle.xml
.xml
resourse/Lang/ouphe/beany/bedampOolongsRepry.xml
.xml
resourse/Lang/ouphe/beany/egoisms.xml
.xml
resourse/Lang/ouphe/beany/gussyFadable.xml
.xml
resourse/Lang/ouphe/beany/hippus.xml
.xml
resourse/Lang/ouphe/beany/letheOroidesLoculi.xml
.xml
resourse/Lang/ouphe/beany/tacitlySoftenTailet.xml
.xml
resourse/Lang/ouphe/beany/waragi.xml
.xml
resourse/Lang/ouphe/cowskinStrew.xml
.xml
resourse/Lang/ouphe/crudesHatband/chicory.xml
.xml
resourse/Lang/ouphe/crudesHatband/daps.xml
.xml
resourse/Lang/ouphe/crudesHatband/duty.xml
.xml
resourse/Lang/ouphe/crudesHatband/hydMoonal.xml
.xml
resourse/Lang/ouphe/crudesHatband/mappingMorphosCarer.xml
.xml
resourse/Lang/ouphe/crudesHatband/pannerSchepel.xml
.xml
resourse/Lang/ouphe/crudesHatband/plug.xml
.xml
resourse/Lang/ouphe/crudesHatband/shohjisTwyer.xml
.xml
resourse/Lang/ouphe/crudesHatband/sloughApprizeFlatmen.xml
.xml
resourse/Lang/ouphe/crudesHatband/uncos.xml
.xml
resourse/Lang/ouphe/crudesHatband/vistaedSpright.xml
.xml
resourse/Lang/ouphe/duarch.xml
.xml
resourse/Lang/ouphe/frothOtacustThoral.xml
.xml
resourse/Lang/ouphe/geosidParangi/amara.xml
.xml
resourse/Lang/ouphe/geosidParangi/caleb.xml
.xml
resourse/Lang/ouphe/geosidParangi/curnPileate.xml
.xml
resourse/Lang/ouphe/geosidParangi/dilemmaLegendsHybla.xml
.xml
resourse/Lang/ouphe/geosidParangi/eelery.xml
.xml
resourse/Lang/ouphe/geosidParangi/pulayanBattute.xml
.xml
resourse/Lang/ouphe/geosidParangi/sleeveEheuArmpits.xml
.xml
resourse/Lang/ouphe/geosidParangi/triones.xml
.xml
resourse/Lang/ouphe/geosidParangi/unguledCreosolHaoles.xml
.xml
resourse/Lang/ouphe/logic.xml
.xml
resourse/Lang/ouphe/messiahViolal.xml
.xml
resourse/Lang/ouphe/nogsCaille.xml
.xml
resourse/Lang/ouphe/ramnes.xml
.xml
resourse/Lang/ouphe/slipesNazifySeawife.xml
.xml
resourse/Lang/ouphe/winceysTabicNutting.xml
.xml
resourse/Lang/ouphe/woks/airplotMythifyPervert.xml
.xml
resourse/Lang/ouphe/woks/bettorsTabaxir.xml
.xml
resourse/Lang/ouphe/woks/carcel.xml
.xml
resourse/Lang/ouphe/woks/kamseen.xml
.xml
resourse/Lang/ouphe/woks/koinon.xml
.xml
resourse/Lang/ouphe/woks/rutilesRapBedamn.xml
.xml
resourse/Lang/ouphe/woks/tipplerGantaAlula.xml
.xml
resourse/Lang/ouphe/woks/wurleysEarIxodian.xml
.xml
resourse/Lang/resnubProxima.xml
.xml
resourse/Lang/valanceGrumous/calmedPrimps.xml
.xml
resourse/Lang/valanceGrumous/culmsPeacingAnarch.xml
.xml
resourse/Lang/valanceGrumous/encover.xml
.xml
resourse/Lang/valanceGrumous/guerdon.xml
.xml
resourse/Lang/valanceGrumous/iiwi.xml
.xml
resourse/Lang/valanceGrumous/indureShawedSulked.xml
.xml
resourse/Lang/valanceGrumous/loculedManlyCreases.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/anthol.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/clavelUnsingTaygeta.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/luffingDubs.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/oldsSaddle.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/ratchesHouseEffuses.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/sailsGridedUnvote.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/tarpansBroidenSowf.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/women.xml
.xml
resourse/Lang/valanceGrumous/maddleUriteArcana/zaftigKinsmenBeechen.xml
.xml
resourse/Lang/valanceGrumous/marketSquirk.xml
.xml
resourse/Lang/valanceGrumous/tng.xml
.xml
resourse/Lang/valanceGrumous/yuftWocasFacade.xml
.xml
resourse/Lang/vincentTensestTriens.xml
.xml
resourse/Lang/voetsekSellingCobra.xml
.xml
resourse/REsc/agreesErratumOpiates.xml
.xml
resourse/REsc/aoristBultell.xml
.xml
resourse/REsc/careenDialing.xml
.xml
resourse/REsc/cleanseDynasty.xml
.xml
resourse/REsc/divulse.xml
.xml
resourse/REsc/elates/aywhere.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/dholesStoutlyPunkin.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/glyoxalGiddifyPacu.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/inklike.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/mostsRecons.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/neezeCoastal.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/undrew.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/upbuilt.xml
.xml
resourse/REsc/elates/broguesFlaredRetem/wallaby.xml
.xml
resourse/REsc/elates/gurneyCattan.xml
.xml
resourse/REsc/elates/hobbing.xml
.xml
resourse/REsc/elates/rabbitySlateElixed.xml
.xml
resourse/REsc/elates/windasCauseur.xml
.xml
resourse/REsc/elates/zinkedUncoked.xml
.xml
resourse/REsc/glycose/acquitItelmes.xml
.xml
resourse/REsc/glycose/bebops/atar.xml
.xml
resourse/REsc/glycose/bebops/corvetsParterBrest.xml
.xml
resourse/REsc/glycose/bebops/dotardsCluckSuccose.xml
.xml
resourse/REsc/glycose/bebops/gentianExist.xml
.xml
resourse/REsc/glycose/bebops/ordene.xml
.xml
resourse/REsc/glycose/bebops/outdoor.xml
.xml
resourse/REsc/glycose/bebops/patrols.xml
.xml
resourse/REsc/glycose/bebops/ritardShikken.xml
.xml
resourse/REsc/glycose/cortianCrumplyLagetto.xml
.xml
resourse/REsc/glycose/legitsBurblerBrayer/aganiceKreatic.xml
.xml
resourse/REsc/glycose/legitsBurblerBrayer/hexene.xml
.xml
resourse/REsc/glycose/legitsBurblerBrayer/hinchChequerReata.xml
.xml
resourse/REsc/glycose/legitsBurblerBrayer/solideoUnslept.xml
.xml
resourse/REsc/glycose/legitsBurblerBrayer/waxersLindoPandied.xml
.xml
resourse/REsc/glycose/pompoonInductFellers.xml
.xml
resourse/REsc/glycose/rattailMelenicStooge.xml
.xml
resourse/REsc/glycose/rilievoRapheCholic.xml
.xml
resourse/REsc/glycose/shanExtirpDebus.xml
.xml
resourse/REsc/glycose/styletsMpangweCrut.xml
.xml
resourse/REsc/mayasMinicar.xml
.xml
resourse/REsc/sert.xml
.xml
resourse/REsc/velellaHotchaDopers.xml
.xml
resourse/REsc/zafferMycosinBoreus.xml
.xml
setup_win64.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:4b:79:66:14:d5:eb:90:86:cb:11:3d:91:4b:cc:dc
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/01/2023, 00:00

Not After

15/01/2026, 23:59

Subject

CN=AVG Technologies USA\, LLC,O=AVG Technologies USA\, LLC,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:6f:18:59:e2:8e:69:0b:81:5e:73:fd:23:c3:33:d8:b5:00:04:7d:33:81:ba:15:39:13:ca:a9:4a:0f:f0:1b
Signer

Actual PE Digest

5c:6f:18:59:e2:8e:69:0b:81:5e:73:fd:23:c3:33:d8:b5:00:04:7d:33:81:ba:15:39:13:ca:a9:4a:0f:f0:1b

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=AVG Technologies USA\, LLC,O=AVG Technologies USA\, LLC,L=Redwood City,ST=California,C=US

03/02/2023, 18:04
Valid: true

Chain 1

CN=AVG Technologies USA\, LLC,O=AVG Technologies USA\, LLC,L=Redwood City,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Chain 2

CN=AVG Technologies USA\, LLC,O=AVG Technologies USA\, LLC,L=Redwood City,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:4b:79:66:14:d5:eb:90:86:cb:11:3d:91:4b:cc:dcCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

5c:6f:18:59:e2:8e:69:0b:81:5e:73:fd:23:c3:33:d8:b5:00:04:7d:33:81:ba:15:39:13:ca:a9:4a:0f:f0:1bSigner

Signature Validations

Verification

03/02/2023, 18:04 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rsrc Size: 385KB - Virtual size: 384KB

.reloc Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:4b:79:66:14:d5:eb:90:86:cb:11:3d:91:4b:cc:dc
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

5c:6f:18:59:e2:8e:69:0b:81:5e:73:fd:23:c3:33:d8:b5:00:04:7d:33:81:ba:15:39:13:ca:a9:4a:0f:f0:1b
Signer

03/02/2023, 18:04
Valid: true

.text
Size: 2.5MB - Virtual size: 2.5MB

.rsrc
Size: 385KB - Virtual size: 384KB

.reloc
Size: 512B - Virtual size: 12B