9414651262[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

9414651262.zip
Size

100KB
MD5

793c9f7903e79bdd04897d1b954189f5
SHA1

93ec73d28643e2ef09c1e79d81594f7f48503d16
SHA256

746c3d6b226262fec7413603232f992ce664bc20b103c74aa29dd98dabd45fe4
SHA512

f9d884ea02b46b83470332cebd60a36b197e577dbf5fbf655f85dc4f2593421d5d9ec5838198b17daaaf9b525d3fb925b91784918c40225a785ebc905beed091
SSDEEP

1536:5oq6B0bRqQuDdImo0mxKeQ00xT2EKeX5Y2YxdBrLSy3thQkdyl2p+VKDxND04u:iBo0wV0xTR62urLSQh7duNV4oP

Score

1^/10

Malware Config

Signatures

Files

9414651262.zip
.zip

Password: infected
eab258669befe7dddf10bb21ce3c5d975db81652b0cc35d3ed0d032cc5556903
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:24:21:d7:a5:00:23:24:a7:21:f5:94:2c:95:27:71
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

06/07/2022, 00:00

Not After

16/07/2025, 23:59

Subject

CN=Bluebeam\, Inc.,OU=Bluebeam\, Inc.,O=Bluebeam\, Inc.,L=Pasadena,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:f0:6d:10:50:71:16:fd:16:8b:21:52:d9:38:f1:76:7f:64:11:76:b9:5a:5d:c4:19:a4:ca:cf:54:3f:69:2a
Signer

Actual PE Digest

92:f0:6d:10:50:71:16:fd:16:8b:21:52:d9:38:f1:76:7f:64:11:76:b9:5a:5d:c4:19:a4:ca:cf:54:3f:69:2a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Bluebeam\, Inc.,OU=Bluebeam\, Inc.,O=Bluebeam\, Inc.,L=Pasadena,ST=California,C=US

12/08/2022, 13:26
Valid: true

Chain 1

CN=Bluebeam\, Inc.,OU=Bluebeam\, Inc.,O=Bluebeam\, Inc.,L=Pasadena,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Chain 2

CN=Bluebeam\, Inc.,OU=Bluebeam\, Inc.,O=Bluebeam\, Inc.,L=Pasadena,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:24:21:d7:a5:00:23:24:a7:21:f5:94:2c:95:27:71Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

92:f0:6d:10:50:71:16:fd:16:8b:21:52:d9:38:f1:76:7f:64:11:76:b9:5a:5d:c4:19:a4:ca:cf:54:3f:69:2aSigner

Signature Validations

Verification

12/08/2022, 13:26 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:24:21:d7:a5:00:23:24:a7:21:f5:94:2c:95:27:71
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

92:f0:6d:10:50:71:16:fd:16:8b:21:52:d9:38:f1:76:7f:64:11:76:b9:5a:5d:c4:19:a4:ca:cf:54:3f:69:2a
Signer

12/08/2022, 13:26
Valid: true

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 512B - Virtual size: 12B