ScriptWareInstaller[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ScriptWareInstaller.exe
Size

1.4MB
MD5

d615b15f8ade30a1fc9840e0957d3545
SHA1

c21c4884df3aa95d7da8fdfa24037b5377afda7f
SHA256

12dad17032e15e60c53f019087c6a0e7a7a1e9b56f531a2a9703498d451c7483
SHA512

d9e25b8d77e82f94e1a3636ec0e41db985769ef1291ee85358960738df5231dba6ea1f1945427f633bbb76b2e9a85ef9ce49d2dff1ef3b4f294f6a77688dd079
SSDEEP

24576:Rf3DOoUWhdoNLLJpTmJG/Olrvn++Sib5h5N4bSRaCUsvp1uSBzyN3DedwlYvN7k4:VSoU2siG/Ai+S+v4GR5NBzkyClY17D

Score

1^/10

Malware Config

Signatures

Files

ScriptWareInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2018 09:26

Not After

11-09-2023 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5e:09:79:db:d3:83:6a:8f:78:72:2a:6b:9f:85:39:e4
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09-05-2022 19:42

Not After

09-07-2023 19:42

Subject

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24-06-2016 20:44

Not After

24-06-2031 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2018 09:26

Not After

11-09-2023 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10-09-2021 16:35

Not After

08-09-2031 16:35

Subject

CN=SSL.com Timestamping Unit 2021,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13-11-2019 18:50

Not After

12-11-2034 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8e:ac:79:65:bf:1f:e5:1f:27:7d:26:b2:e5:19:f4:b7:dd:2e:6f:7e:7d:d4:ed:96:7e:71:18:6d:ca:37:6c:8c
Signer

Actual PE Digest

8e:ac:79:65:bf:1f:e5:1f:27:7d:26:b2:e5:19:f4:b7:dd:2e:6f:7e:7d:d4:ed:96:7e:71:18:6d:ca:37:6c:8c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

26-11-2022 16:27
Valid: true

Chain 1

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Chain 2

CN=Scriptware Software LTD,O=Scriptware Software LTD,L=London,ST=London,C=GB

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

5e:09:79:db:d3:83:6a:8f:78:72:2a:6b:9f:85:39:e4Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

8e:ac:79:65:bf:1f:e5:1f:27:7d:26:b2:e5:19:f4:b7:dd:2e:6f:7e:7d:d4:ed:96:7e:71:18:6d:ca:37:6c:8cSigner

Signature Validations

Verification

26-11-2022 16:27 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 12B

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

5e:09:79:db:d3:83:6a:8f:78:72:2a:6b:9f:85:39:e4
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

8e:ac:79:65:bf:1f:e5:1f:27:7d:26:b2:e5:19:f4:b7:dd:2e:6f:7e:7d:d4:ed:96:7e:71:18:6d:ca:37:6c:8c
Signer

26-11-2022 16:27
Valid: true

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 12B