8aab92d14fb45e9b421540677f9528c1265a4d70c5bb2c1b11acfffeb1014e50[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

8aab92d14fb45e9b421540677f9528c1265a4d70c5bb2c1b11acfffeb1014e50.zip
Size

1.5MB
MD5

b49ed3b5b97d510067e04b4f14fc02ba
SHA1

92638971888e574583eb0bd08ed711817380b9ed
SHA256

b68a55c573f4f9dc3c4e072697e6c451a75f9a5bf49d70615e5661ba8ea1be7f
SHA512

32e6fda51fd19da3bda6f57744b49e58b38e789a99df58d01a0db9ad2f08fcb48e148fa418204452b6e757e468f44d7d3bbea9ac6f0fed5dccd5a9bb0e716195
SSDEEP

24576:3xpEdOAjGO41Taxq41LGZS6E5grIXXv11Hz5mh4MHi2MAeD6iNWEdANyJxsjisR0:3xpEdZC7exq44ESiXvjHzgh4MHi2MHXx

Score

1^/10

Malware Config

Signatures

Files

8aab92d14fb45e9b421540677f9528c1265a4d70c5bb2c1b11acfffeb1014e50.zip
.zip

Password: infected
8aab92d14fb45e9b421540677f9528c1265a4d70c5bb2c1b11acfffeb1014e50.exe
.exe windows x64

Password: infected

9af072ae438162e16f56e169c19dabb2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:62:df:fe:c6:e9:33:2b:fa:93:b2:f1:87:86:36:42
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07-06-2021 00:00

Not After

09-07-2024 23:59

Subject

CN=Fortinet Technologies (Canada) ULC,O=Fortinet Technologies (Canada) ULC,L=Burnaby,ST=British Columbia,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:54:ef:f2:e2:65:04:aa:12:b5:40:6a:04:38:19:40:52:b7:90:72:03:cc:d4:1b:3a:7a:81:49:dd:90:9b:04
Signer

Actual PE Digest

a3:54:ef:f2:e2:65:04:aa:12:b5:40:6a:04:38:19:40:52:b7:90:72:03:cc:d4:1b:3a:7a:81:49:dd:90:9b:04

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Fortinet Technologies (Canada) ULC,O=Fortinet Technologies (Canada) ULC,L=Burnaby,ST=British Columbia,C=CA

02-05-2022 19:22
Valid: true

Chain 1

CN=Fortinet Technologies (Canada) ULC,O=Fortinet Technologies (Canada) ULC,L=Burnaby,ST=British Columbia,C=CA

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

PathMakeUniqueName

mscoree

_CorExeMain

advapi32

RegOpenKeyExW

user32

UpdateWindow

kernel32

GetModuleHandleA

Sections

.rdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

9af072ae438162e16f56e169c19dabb2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

08:62:df:fe:c6:e9:33:2b:fa:93:b2:f1:87:86:36:42Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

a3:54:ef:f2:e2:65:04:aa:12:b5:40:6a:04:38:19:40:52:b7:90:72:03:cc:d4:1b:3a:7a:81:49:dd:90:9b:04Signer

Signature Validations

Verification

02-05-2022 19:22 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

.rdata Size: - Virtual size: 1.1MB

.rsrc Size: 307KB - Virtual size: 306KB

.data Size: 102KB - Virtual size: 101KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

08:62:df:fe:c6:e9:33:2b:fa:93:b2:f1:87:86:36:42
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

a3:54:ef:f2:e2:65:04:aa:12:b5:40:6a:04:38:19:40:52:b7:90:72:03:cc:d4:1b:3a:7a:81:49:dd:90:9b:04
Signer

02-05-2022 19:22
Valid: true

.rdata
Size: - Virtual size: 1.1MB

.rsrc
Size: 307KB - Virtual size: 306KB

.data
Size: 102KB - Virtual size: 101KB