passports scan and etc.zip
- SHA256 303ca1ef12fe63d0110a587290fe896e4d49d34b2cb9ae547a3ff71d0facd39b
Static task
static1
Behavioral task
behavioral1
Sample
passports scan and etc.scr
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
passports scan and etc.scr
Resource
win10v2004-20230915-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target passports scan and etc.zip
- Size 1013KB
- Sample231024-v8xtfsah58
- SHA256 303ca1ef12fe63d0110a587290fe896e4d49d34b2cb9ae547a3ff71d0facd39b
- MD5 aa53dee2a07584775a1c528761f7b83e
- SHA1 8850736d5c1881e6dac690d6fec762b1127b6a35
- SHA512 f0cfacc087325855df6045c56919c52e51fe91ebd23344d3bcccb138f76232ff070f88badb2832f00027e87c9b70073863c3c6b01ecdf4aaeff3100430999aec
- SSDEEP 6144:eGbxdKhuRdk4/ximKBuy4755ENvWCGR2vp:L6uRdbximl6OCBh
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
passports scan and etc.zip.zip 1013KB
-
passports scan and etc.scr.exe 650.3MB
passports scan and etc.scr
- IMPHASH 301c8a1bd65529053ebf05ef09ce2f46
- SHA256 84f57037df270de105acf579f58c974c1507a9be920ff4f454b732a08284fe97
- MD5 64b5b7127472d645b5842c4cb98e8217
- SHA1 8589e2900ccd0d3acf3bbb0bbd986d3d13c4a2a4
- SHA512 bea30ea319ae336d1926c6ddcddb51bc1771f756fbe51115ea6f28ba511c3a6ec42bbd24b376c16b169becca358e0e2ae3474f55998e3c38b1bbfb8ee7fcbbeb
- SSDEEP 6144:2fO81oy7YUrzFKiNd0W1PqmKBy64H5ZErx8iYt:JsvzF/dFPqmXWq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c8:cc:80:4c:31:60:5f:0e:b6:32:d0:8d:42:b5:d3:a5:13:0d:d2:5c:b6:4c:92:db:32:40:d7:80:d8:d2:78:4b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=07687850,CN=Vitae Biotech Ltd,O=Vitae Biotech Ltd,L=London,ST=England,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 24, 2023
Subject
SERIALNUMBER=07687850,CN=Vitae Biotech Ltd,O=Vitae Biotech Ltd,L=London,ST=England,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
7c:a6:35:4d:8e:a7:10:84:98:76:45:ad:5b:21:25:5a
Issuer
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 18, 2023 - Oct 17, 2024
Subject
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Issuer
CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 26, 2019 - Mar 22, 2034
Subject
CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 9, 2022 - Dec 6, 2032
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
1
Major OS version
5
Entry point
24682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FindFirstFileW
WriteConsoleInputW
WriteConsoleOutputCharacterW
lstrlenA
GetDriveTypeW
CommConfigDialogA
GetConsoleAliasA
GetCurrentActCtx
SetDefaultCommConfigW
GetModuleHandleExW
WriteConsoleInputA
OpenSemaphoreA
GetSystemDefaultLCID
_lclose
CreateNamedPipeW
GenerateConsoleCtrlEvent
FindNextVolumeMountPointA
GetConsoleAliasesA
GetCompressedFileSizeW
GetConsoleAliasExesW
WaitNamedPipeW
GetCommandLineA
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
EnumSystemCodePagesA
GetConsoleAliasW
GetFileAttributesW
ReplaceFileW
ReadFile
QueryInformationJobObject
CompareStringW
lstrlenW
GetStartupInfoW
SetConsoleTitleA
GetShortPathNameA
FindResourceA
GetLastError
GetCurrentDirectoryW
SetLastError
ReadConsoleOutputCharacterA
AttachConsole
VerLanguageNameA
SetVolumeLabelW
RemoveDirectoryA
CopyFileA
FreeUserPhysicalPages
SetComputerNameA
GetProcessVersion
FindClose
UnhandledExceptionFilter
LocalAlloc
MoveFileA
CreateEventW
GetCommMask
SetThreadIdealProcessor
AddAtomA
SetCommMask
FindAtomA
FoldStringW
GetSystemInfo
FindNextFileA
GetModuleHandleA
GetCommTimeouts
lstrcatW
VirtualProtect
QueryPerformanceFrequency
ReadConsoleInputW
GetWindowsDirectoryW
MoveFileWithProgressW
GlobalAddAtomW
ResetWriteWatch
DeleteFileA
lstrcpyA
EnumSystemLocalesA
GetTempFileNameW
CreateFileW
WriteConsoleW
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameW
Sleep
HeapSize
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
RtlUnwind
SetStdHandle
FlushFileBuffers
user32
CharUpperW
advapi32
AbortSystemShutdownA
winhttp
WinHttpWriteData
Name
.text
Size
249KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=28, id=171, productName=VS2010 build 30319, version=30319,
count=24, id=158, productName=VS2010 build 30319, version=30319,
count=118, id=170, productName=VS2010 build 30319, version=30319,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=150, id=1, productName=Unmarked objects,
count=1, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,