ACMobile[.]UWP_3[.]13[.]9[.]0_Test_indacdigital[.]ZIP

Resubmissions

21-04-2023 18:11

230421-wslxpahc47 3

21-04-2023 17:23

230421-vylnfaha68 3

21-04-2023 17:21

230421-vxcddaha62 1

Sharing

Copy URL

Twitter E-mail

General

Target

ACMobile.UWP_3.13.9.0_Test_indacdigital.ZIP
Size

55.1MB
MD5

869f3ec0e3a997c017ad3fb023a56335
SHA1

744b7e634556cb27fd453378d43a7a05b01255fd
SHA256

5fba92b48687b8cbaf19410ed222c6a77443bb146ffbcdf432c7d59381ca1567
SHA512

20fd75fa25ef0ccea6e2da2304eb5cea8944f544f934a927ea0ffc3db4a9ffaeb17af47243234d4997d946bf48a94a29435de878a70ba0785f5c472132e6e512
SSDEEP

1572864:gw9oxLW2nGTFoLlQl/i8TDy+DzTFEGUcSalKb9ghL:1oxK2zoq8S+PGG7SalKbwL

Score

1^/10

Malware Config

Signatures

Files

ACMobile.UWP_3.13.9.0_Test_indacdigital.ZIP
.rar
ACMobile.UWP_3.13.9.0_Test/ACMobile.UWP_3.13.9.0_x86.appxbundle
.zip
ACMobile.UWP_3.13.9.0_scale-100.appx
.appx
ACMobile.UWP_3.13.9.0_scale-125.appx
.appx
ACMobile.UWP_3.13.9.0_scale-150.appx
.appx
ACMobile.UWP_3.13.9.0_scale-400.appx
.appx
ACMobile.UWP_3.13.9.0_x86.appx
.appx
AppxBlockMap.xml
.xml
AppxMetadata/AppxBundleManifest.xml
.xml
AppxSignature.p7x
[Content_Types].xml
.xml
ACMobile.UWP_3.13.9.0_Test/ACMobile.UWP_3.13.9.0_x86.cer
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.ps1
.ps1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/cs-CZ/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/de-DE/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/en-US/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/es-ES/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/fr-FR/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/it-IT/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/ja-JP/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/ko-KR/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/pl-PL/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/pt-BR/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/ru-RU/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/tr-TR/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/zh-CN/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/zh-TW/Add-AppDevPackage.psd1
ACMobile.UWP_3.13.9.0_Test/Dependencies/ARM/Microsoft.NET.CoreRuntime.1.1.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/ARM/Microsoft.VCLibs.ARM.14.00.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/ARM64/Microsoft.VCLibs.ARM64.14.00.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/x64/Microsoft.NET.CoreRuntime.1.1.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/x64/Microsoft.VCLibs.x64.14.00.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/x86/Microsoft.NET.CoreRuntime.1.1.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Dependencies/x86/Microsoft.VCLibs.x86.14.00.appx
.appx
ACMobile.UWP_3.13.9.0_Test/Install.ps1
.ps1
ACMobile.UWP_3.13.9.0_Test/TelemetryDependencies/LogSideloadingTelemetry.ps1
.ps1
ACMobile.UWP_3.13.9.0_Test/TelemetryDependencies/Microsoft.VisualStudio.RemoteControl.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:77:ed:fa:9c:4f:49:00:b4:38:ae:3f:d5:80:79:ea:fe:75:5f:4c:2d:b4:60:a7:34:67:ed:0a:9c:fa:f8:2f
Signer

Actual PE Digest

a1:77:ed:fa:9c:4f:49:00:b4:38:ae:3f:d5:80:79:ea:fe:75:5f:4c:2d:b4:60:a7:34:67:ed:0a:9c:fa:f8:2f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21-04-2023 09:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ACMobile.UWP_3.13.9.0_Test/TelemetryDependencies/Microsoft.VisualStudio.Telemetry.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:de:8d:56:82:5a:f1:a4:a9:67:00:00:00:00:03:de
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:24

Not After

02-12-2021 21:24

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:ee:cc:19:f8:9a:e2:2d:8a:e0:06:56:6a:56:71:fb:e3:51:85:21:9c:1a:8d:36:85:3a:69:69:66:5c:a3:5f
Signer

Actual PE Digest

2b:ee:cc:19:f8:9a:e2:2d:8a:e0:06:56:6a:56:71:fb:e3:51:85:21:9c:1a:8d:36:85:3a:69:69:66:5c:a3:5f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21-04-2023 09:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 773KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ACMobile.UWP_3.13.9.0_Test/TelemetryDependencies/Microsoft.VisualStudio.Utilities.Internal.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:25

Not After

02-05-2020 21:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:78:0f:ab:02:58:d9:d9:b0:5b:03:75:84:76:0a:f0:8d:81:60:a7:89:10:82:00:cf:31:82:9c:30:30:f9:3c
Signer

Actual PE Digest

a0:78:0f:ab:02:58:d9:d9:b0:5b:03:75:84:76:0a:f0:8d:81:60:a7:89:10:82:00:cf:31:82:9c:30:30:f9:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21-04-2023 09:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ACMobile.UWP_3.13.9.0_Test/TelemetryDependencies/Newtonsoft.Json.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

a1:77:ed:fa:9c:4f:49:00:b4:38:ae:3f:d5:80:79:ea:fe:75:5f:4c:2d:b4:60:a7:34:67:ed:0a:9c:fa:f8:2fSigner

Signature Validations

Verification

21-04-2023 09:05 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 32KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:de:8d:56:82:5a:f1:a4:a9:67:00:00:00:00:03:deCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

2b:ee:cc:19:f8:9a:e2:2d:8a:e0:06:56:6a:56:71:fb:e3:51:85:21:9c:1a:8d:36:85:3a:69:69:66:5c:a3:5fSigner

Signature Validations

Verification

21-04-2023 09:05 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 773KB - Virtual size: 773KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ceCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

a0:78:0f:ab:02:58:d9:d9:b0:5b:03:75:84:76:0a:f0:8d:81:60:a7:89:10:82:00:cf:31:82:9c:30:30:f9:3cSigner

Signature Validations

Verification

21-04-2023 09:05 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 20KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 511KB - Virtual size: 511KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

a1:77:ed:fa:9c:4f:49:00:b4:38:ae:3f:d5:80:79:ea:fe:75:5f:4c:2d:b4:60:a7:34:67:ed:0a:9c:fa:f8:2f
Signer

21-04-2023 09:05
Valid: false

.text
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:de:8d:56:82:5a:f1:a4:a9:67:00:00:00:00:03:de
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

2b:ee:cc:19:f8:9a:e2:2d:8a:e0:06:56:6a:56:71:fb:e3:51:85:21:9c:1a:8d:36:85:3a:69:69:66:5c:a3:5f
Signer

21-04-2023 09:05
Valid: false

.text
Size: 773KB - Virtual size: 773KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

a0:78:0f:ab:02:58:d9:d9:b0:5b:03:75:84:76:0a:f0:8d:81:60:a7:89:10:82:00:cf:31:82:9c:30:30:f9:3c
Signer

21-04-2023 09:05
Valid: false

.text
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 511KB - Virtual size: 511KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B