Dmv-Delaware-Tint-Waiver[.]exe[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Dmv-Delaware-Tint-Waiver.exe.7z
Size

4.1MB
MD5

98cc30bc227c1916a2a6faab21d8894a
SHA1

34651cf53d6d72e7effc3e08d7721e510dfa2c40
SHA256

cf70562207b44eb6bdadc3589e5490a04a55399cad79b411aad8628155d22ab4
SHA512

1041f89febc5c5e11306a2dfc250e10f2ae29bd5fb1e019f5dd7ea891d8f5984fc223981d78049ce219b380f70d853f12a932a907972534090a4e434749d4023
SSDEEP

98304:EwJGkHJ4zI4tTvKjDa2rSfTsWyucOKNJfOyDyZ:3J74xTvMDD+fNyucOKHWZ

Score

1^/10

Malware Config

Signatures

Files

Dmv-Delaware-Tint-Waiver.exe.7z
.7z

Password: infected
Dmv-Delaware-Tint-Waiver.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:83:db:13:70:21:b5:1f:3a:2a:08:a7:6a:4b:c0:66
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

28/07/2021, 00:00

Not After

27/07/2022, 23:59

Subject

SERIALNUMBER=700013,CN=Divertida Creative Limited,O=Divertida Creative Limited,L=Dublin,C=IE,1.3.6.1.4.1.311.60.2.1.3=#13024945,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

75:18:98:30:1d:99:b2:3b:82:4b:8c:27:bd:be:66:8a:29:ac:16:6c
Signer

Actual PE Digest

75:18:98:30:1d:99:b2:3b:82:4b:8c:27:bd:be:66:8a:29:ac:16:6c

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=700013,CN=Divertida Creative Limited,O=Divertida Creative Limited,L=Dublin,C=IE,1.3.6.1.4.1.311.60.2.1.3=#13024945,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

21/03/2023, 12:22
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

08:83:db:13:70:21:b5:1f:3a:2a:08:a7:6a:4b:c0:66Certificate

Extended Key Usages

Key Usages

75:18:98:30:1d:99:b2:3b:82:4b:8c:27:bd:be:66:8a:29:ac:16:6cSigner

Signature Validations

Verification

21/03/2023, 12:22 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rsrc Size: 275KB - Virtual size: 274KB

.reloc Size: 512B - Virtual size: 12B

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

08:83:db:13:70:21:b5:1f:3a:2a:08:a7:6a:4b:c0:66
Certificate

75:18:98:30:1d:99:b2:3b:82:4b:8c:27:bd:be:66:8a:29:ac:16:6c
Signer

21/03/2023, 12:22
Valid: false

.text
Size: 4.4MB - Virtual size: 4.4MB

.rsrc
Size: 275KB - Virtual size: 274KB

.reloc
Size: 512B - Virtual size: 12B