NewFileTime[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

NewFileTime.zip
Size

101KB
MD5

2a1beed3d68ce9dc465ca7ac98361fba
SHA1

0127bd463557e80f6228e8d4caf726ac22caf413
SHA256

baf2369b9653585f7fedf6cacb59cb13b498abc169b2f08759ad2125e95618e8
SHA512

ee6a7033720d69ab1b46fc2901ecac5e16bf4e8067b8ba40542fc8bc3e8d14edcc454d015f53216931bc7ff4a1dd76c4c32da8db4d23bb5f1ef66413276ffcce
SSDEEP

3072:G6Oi7ZzsstG6eHdS0Mvis/oaUzUldDqSC+CpO:G6hZnVsQ1iOuUlhFC0

Score

1^/10

Malware Config

Signatures

Files

NewFileTime.zip
.zip
NewFileTime.exe
.exe windows x86

5e5bfbf22d3d5df9f50a5026d2269e5e

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27-07-2023 09:33

Not After

27-07-2024 09:33

Subject

SERIALNUMBER=15.06.2017,CN=Nenad Hrg,O=Nenad Hrg,STREET=Edelweissstrasse 104,L=Taufkirchen,ST=Bayern,C=DE,1.2.840.113549.1.9.1=#0c16737570706f727440736f6674776172656f6b2e636f6d,1.3.6.1.4.1.311.60.2.1.1=#130b546175666b69726368656e,1.3.6.1.4.1.311.60.2.1.2=#130642617965726e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06-04-2022 07:45

Not After

08-05-2033 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:4b:2e:1b:21:f6:c8:0c:8b:3c:93:ef:03:dd:d9:de:ab:61:7d:62:4d:d0:fc:d1:ea:00:ee:f0:23:a1:0b:02
Signer

Actual PE Digest

32:4b:2e:1b:21:f6:c8:0c:8b:3c:93:ef:03:dd:d9:de:ab:61:7d:62:4d:d0:fc:d1:ea:00:ee:f0:23:a1:0b:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
GetTimeFormatA
GetDateFormatA
EnumTimeFormatsA
EnumDateFormatsA
GetUserDefaultLCID
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FindNextFileA
TzSpecificLocalTimeToSystemTime
GetFullPathNameA
MultiByteToWideChar
InitializeCriticalSection
lstrlenW
DeleteFileA
WriteFile
GetUserDefaultLangID
GetTempPathA
CreateDirectoryA
GetModuleFileNameA
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
OutputDebugStringA
DebugBreak
GetModuleHandleA
GetLocalTime
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
LoadLibraryA
InterlockedDecrement
FindFirstFileA
FindClose
lstrcatA
GetFileAttributesA
SetFileAttributesA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
lstrcpynA
InterlockedIncrement
lstrlenA
GlobalAlloc
GlobalLock
lstrcpyA
GlobalUnlock
GetTempFileNameA
WideCharToMultiByte
GetStartupInfoA

user32

SetTimer
LoadMenuA
SetMenu
CreateMenu
CreatePopupMenu
AppendMenuA
GetClipboardData
LoadImageA
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowTextA
GetWindowTextA
DialogBoxParamA
GetSystemMetrics
MessageBoxA
LoadStringA
SystemParametersInfoW
SetPropW
OffsetRect
GetWindowRect
GetDlgItem
EndDialog
CopyRect
DefWindowProcA
ReleaseDC
MapWindowPoints
GetClassNameA
CallWindowProcA
CallNextHookEx
SetWindowLongA
GetWindowLongA
CharLowerA
SetWindowsHookExA
SetWindowPos
ShowWindow
CreateWindowExA
PostMessageA
GetParent
SetMenuItemInfoA
GetSysColorBrush
IsWindowVisible
GetActiveWindow
GetSubMenu
TrackPopupMenuEx
UnhookWindowsHookEx
GetMessagePos
GetMenuItemCount
GetMenuItemInfoA
SystemParametersInfoA
GetFocus
DrawTextA
SetRect
SetParent
GetCursorPos
CheckMenuItem
GetKeyState
DestroyMenu
TrackPopupMenu
InsertMenuA
RedrawWindow
KillTimer
SendDlgItemMessageA
ClientToScreen
MoveWindow
GetSysColor
wsprintfA
EnableWindow
PostQuitMessage
DestroyWindow
ScreenToClient
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
GetDlgCtrlID
InvalidateRect
CharNextA
wvsprintfA
GetDC
OpenClipboard
SendMessageA
GetClientRect
GetWindowPlacement

gdi32

SetPixel
GetCurrentObject
GetStockObject
GetObjectA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetTextExtentPoint32A
SelectObject
OffsetWindowOrgEx
GetClipBox
ExtTextOutA
SetBkColor
SetTextColor
CreateSolidBrush
SetBkMode

comdlg32

GetOpenFileNameA

shell32

ShellExecuteExA
DragQueryFileA
DragFinish
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoCreateInstance
OleInitialize

oleaut32

VarDateFromStr
SysAllocStringLen

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
floor
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_ismbcspace
_atoi64
_mbschr
free
mktime
memmove
malloc
_mbsstr
_mbsrchr
_ftol
fread
fseek
ftell
rewind
_filbuf
_flsbuf
exit
atoi
_ismbcdigit
wcslen
_mbscmp
rand
sprintf
fopen
fwrite
fclose
??2@YAPAXI@Z
??3@YAXPAX@Z

comctl32

InitCommonControlsEx
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_DrawEx
ImageList_Draw

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NewFileTime.txt

Sharing

General

Malware Config

Signatures

Files

5e5bfbf22d3d5df9f50a5026d2269e5e

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

32:4b:2e:1b:21:f6:c8:0c:8b:3c:93:ef:03:dd:d9:de:ab:61:7d:62:4d:d0:fc:d1:ea:00:ee:f0:23:a1:0b:02Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

msvcrt

comctl32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 48KB - Virtual size: 97KB

.rsrc Size: 20KB - Virtual size: 18KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

07:28:cf:12:7e:b4:52:6b:3f:c8:df:87
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

32:4b:2e:1b:21:f6:c8:0c:8b:3c:93:ef:03:dd:d9:de:ab:61:7d:62:4d:d0:fc:d1:ea:00:ee:f0:23:a1:0b:02
Signer

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 48KB - Virtual size: 97KB

.rsrc
Size: 20KB - Virtual size: 18KB