file_ad460ebe7eef42fa95a018b7490c17fa_2023-03-02_15_09_06_065000[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

file_ad460ebe7eef42fa95a018b7490c17fa_2023-03-02_15_09_06_065000.zip
Size

148.0MB
MD5

fcc2611ef869d60a2ba623175c5f824f
SHA1

80bb9abd3c7a9e613d51eb7d8b8e1ac97640835f
SHA256

511fe2d7ddad031342d13ec630e4385b047486998c8096228229d9621175c4f0
SHA512

bbf8a1dc3592695ce1cdb375907677014f8f63937b58e7e1c8018bc6ee7016f07f1bc3ea7509d49f9c533a77b5dacf3ee92c57a90098a5c6498275bbafe54b01
SSDEEP

3145728:9m4klaECUZe2Jozr4oUmeQS3YdKz3i96AhbSCAJ31OJm8W1CML:9m4kk/4LyS3YE26As93UW11

Score

1^/10

Malware Config

Signatures

Files

file_ad460ebe7eef42fa95a018b7490c17fa_2023-03-02_15_09_06_065000.zip
.zip
entry_1_0/ControlUpConsole.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0c:40:db:83:24:1a:15:18:9b:4e:01:1c:32:c9:40:ea
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/02/2019, 00:00

Not After

17/05/2022, 12:00

Subject

CN=ControlUp\, Inc.,O=ControlUp\, Inc.,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:f2:54:b8:0f:d0:6e:7b:86:d1:2a:56:04:93:b5:76:61:06:cd:0c:48:ef:bd:0f:a2:38:b1:46:aa:1b:07:9d
Signer

Actual PE Digest

f7:f2:54:b8:0f:d0:6e:7b:86:d1:2a:56:04:93:b5:76:61:06:cd:0c:48:ef:bd:0f:a2:38:b1:46:aa:1b:07:9d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=ControlUp\, Inc.,O=ControlUp\, Inc.,L=San Jose,ST=California,C=US

13/09/2021, 09:12
Valid: true

Chain 1

CN=ControlUp\, Inc.,O=ControlUp\, Inc.,L=San Jose,ST=California,C=US

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 252.2MB - Virtual size: 252.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
manifest.json

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0c:40:db:83:24:1a:15:18:9b:4e:01:1c:32:c9:40:eaCertificate

Extended Key Usages

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

f7:f2:54:b8:0f:d0:6e:7b:86:d1:2a:56:04:93:b5:76:61:06:cd:0c:48:ef:bd:0f:a2:38:b1:46:aa:1b:07:9dSigner

Signature Validations

Verification

13/09/2021, 09:12 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 252.2MB - Virtual size: 252.2MB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 31KB - Virtual size: 31KB

0c:40:db:83:24:1a:15:18:9b:4e:01:1c:32:c9:40:ea
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

f7:f2:54:b8:0f:d0:6e:7b:86:d1:2a:56:04:93:b5:76:61:06:cd:0c:48:ef:bd:0f:a2:38:b1:46:aa:1b:07:9d
Signer

13/09/2021, 09:12
Valid: true

.text
Size: 252.2MB - Virtual size: 252.2MB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 31KB - Virtual size: 31KB