Setup (1)[.]exe[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

Setup (1).exe.7z
Size

540KB
MD5

bfdfe25ced6615872b5769beac6fbe61
SHA1

9d81f5d362e69c74fcdb67c3abcf3fbc495037b5
SHA256

a179e28ea693eb2d799417d5b41f53c24903c163735a4a18ce6c527bfa0580f8
SHA512

c231b3c686620a81b684fe63cb69ba2cab4c2d61bafcb35f4a6031f99a204039c359830b61be81828a368f5fcf0b83c7737a64522b3cc5636df823054552a3f3
SSDEEP

12288:ohUJISVTmfQrYSSXfGpnlQ7pt/9OVj73P57U0DuZjW:Mst7rOWnOFtqvfFU0yj

Score

1^/10

Malware Config

Signatures

Files

Setup (1).exe.7z
.7z

Password: infected
Setup.exe
.exe windows x86

037b4776cf4a2ba5d7bec40ce9f432e3

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:be:02:c8:83:8f:bf:02:ab:56:ed:ab:b1:e3:4c:19
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/10/2021, 00:00

Not After

22/10/2024, 23:59

Subject

SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:33:da:40:33:4b:dd:e1:21:65:df:83:31:33:c9:1e:91:18:0c:f8:0b:8e:88:ce:4b:09:1f:3c:08:47:10:47
Signer

Actual PE Digest

33:33:da:40:33:4b:dd:e1:21:65:df:83:31:33:c9:1e:91:18:0c:f8:0b:8e:88:ce:4b:09:1f:3c:08:47:10:47

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcessStop
GetCurrentProcessId
IsDebuggerPresent
CheckRemoteDebuggerPresent
GetCurrentProcess

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

037b4776cf4a2ba5d7bec40ce9f432e3

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:be:02:c8:83:8f:bf:02:ab:56:ed:ab:b1:e3:4c:19Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

33:33:da:40:33:4b:dd:e1:21:65:df:83:31:33:c9:1e:91:18:0c:f8:0b:8e:88:ce:4b:09:1f:3c:08:47:10:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 512B - Virtual size: 220B

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 132B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:be:02:c8:83:8f:bf:02:ab:56:ed:ab:b1:e3:4c:19
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

33:33:da:40:33:4b:dd:e1:21:65:df:83:31:33:c9:1e:91:18:0c:f8:0b:8e:88:ce:4b:09:1f:3c:08:47:10:47
Signer

.text
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 512B - Virtual size: 220B

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 132B