2d6497c15f087be4d944a207736521befacbf9da13fbeaf854801327a99ed326[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

2d6497c15f087be4d944a207736521befacbf9da13fbeaf854801327a99ed326.zip
Size

193KB
MD5

d757aaed7ea03ac47f2e41c5eefe846a
SHA1

62748d5cb687ea0dca382f5789b0a5dd4c7e06c1
SHA256

1e922623b20fa986f28b56a7ba69381973c375eeda0524e62d277608d812fee0
SHA512

7edb6a3403a366eeb64c7da18028847e872d981d5a25d23c2d10e29a51ca198b179acee3cdb74266938fa11199cceabcf0bfb96527718e4fe3f2ad15bef36cae
SSDEEP

3072:coNHjTjpyi9qUhGVRpTBp6X/ncUgfCwfwLYOqeSwvXn1dYFcxUmn1xB2PHJw640b:coVjTF/6pTv6X/cUWkYONfXFp6Y/yylm

Score

1^/10

Malware Config

Signatures

Files

2d6497c15f087be4d944a207736521befacbf9da13fbeaf854801327a99ed326.zip
.zip

Password: infected
2d6497c15f087be4d944a207736521befacbf9da13fbeaf854801327a99ed326
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

12:bf:8b:05:e5:66:9f:9c:4b:d9:e3:12:35:14:ae:61
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2023, 01:25

Not After

19/05/2024, 15:00

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

7f:8c:41:5a:5b:cb:6f:84:44:2e:ce:46:36:70:be:bd
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2023, 01:25

Not After

22/05/2038, 15:10

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:ec:d8:00:ae:ef:6b:f7:62:92:cb:2b:dd:ce:46:32:f2:04:7a:d6
Signer

Actual PE Digest

ad:ec:d8:00:ae:ef:6b:f7:62:92:cb:2b:dd:ce:46:32:f2:04:7a:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

12:bf:8b:05:e5:66:9f:9c:4b:d9:e3:12:35:14:ae:61Certificate

Extended Key Usages

7f:8c:41:5a:5b:cb:6f:84:44:2e:ce:46:36:70:be:bdCertificate

Key Usages

ad:ec:d8:00:ae:ef:6b:f7:62:92:cb:2b:dd:ce:46:32:f2:04:7a:d6Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 123KB - Virtual size: 122KB

.rsrc Size: 150KB - Virtual size: 149KB

.reloc Size: 512B - Virtual size: 12B

12:bf:8b:05:e5:66:9f:9c:4b:d9:e3:12:35:14:ae:61
Certificate

7f:8c:41:5a:5b:cb:6f:84:44:2e:ce:46:36:70:be:bd
Certificate

ad:ec:d8:00:ae:ef:6b:f7:62:92:cb:2b:dd:ce:46:32:f2:04:7a:d6
Signer

.text
Size: 123KB - Virtual size: 122KB

.rsrc
Size: 150KB - Virtual size: 149KB

.reloc
Size: 512B - Virtual size: 12B