c874e2d65f84cc206c008760c50ccfac6ee6b5916fc9af251a3a6a3f34329f76[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

c874e2d65f84cc206c008760c50ccfac6ee6b5916fc9af251a3a6a3f34329f76.exe.zip
Size

49.3MB
MD5

76b79e9e3f7a3aa1cb2c1dde70d84388
SHA1

97badc06ad6f0be69659861561d7aa7e28144d3d
SHA256

19c39b46a14a31d3ee6ef3839d959ff27b06b86287a0e8a68929522abff08db9
SHA512

d0512815c247b872cd6e4fe68b538eb19a822ac959512f916bd6beca09134238b12def6d0108ce2f815a7aa67759aff375152045ef5f819afed62a9ea02870aa
SSDEEP

1572864:gLZzOj1LQRaF6SgQw8tf5/vqW4kKd98tsmPPm9Z/:WxEQ/VQw815vq1F+GZ/

Score

1^/10

Malware Config

Signatures

Files

c874e2d65f84cc206c008760c50ccfac6ee6b5916fc9af251a3a6a3f34329f76.exe.zip
.zip

Password: infected
c874e2d65f84cc206c008760c50ccfac6ee6b5916fc9af251a3a6a3f34329f76.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23/05/2022, 00:00

Not After

22/05/2025, 23:59

Subject

CN=pdfforge GmbH,O=pdfforge GmbH,L=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23/05/2022, 00:00

Not After

22/05/2025, 23:59

Subject

CN=pdfforge GmbH,O=pdfforge GmbH,L=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b5:7e:b8:e1:5c:d4:e8:5f:6f:92:25:c6:d5:c9:17:dd:ab:6c:2e:37:ae:6c:cb:20:0a:b2:f2:ca:7b:a2:8e:ec
Signer

Actual PE Digest

b5:7e:b8:e1:5c:d4:e8:5f:6f:92:25:c6:d5:c9:17:dd:ab:6c:2e:37:ae:6c:cb:20:0a:b2:f2:ca:7b:a2:8e:ec

Digest Algorithm

sha256

PE Digest Matches

true

ab:7c:03:70:2f:8e:7d:d8:e3:9d:94:5b:f4:3a:39:95:9a:4c:30:2f
Signer

Actual PE Digest

ab:7c:03:70:2f:8e:7d:d8:e3:9d:94:5b:f4:3a:39:95:9a:4c:30:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1016KB - Virtual size: 1015KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15Certificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

b5:7e:b8:e1:5c:d4:e8:5f:6f:92:25:c6:d5:c9:17:dd:ab:6c:2e:37:ae:6c:cb:20:0a:b2:f2:ca:7b:a2:8e:ecSigner

ab:7c:03:70:2f:8e:7d:d8:e3:9d:94:5b:f4:3a:39:95:9a:4c:30:2fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1016KB - Virtual size: 1015KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 12B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0f:9d:0f:ac:51:4f:24:e1:1b:f3:4f:7f:83:f1:63:15
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

b5:7e:b8:e1:5c:d4:e8:5f:6f:92:25:c6:d5:c9:17:dd:ab:6c:2e:37:ae:6c:cb:20:0a:b2:f2:ca:7b:a2:8e:ec
Signer

ab:7c:03:70:2f:8e:7d:d8:e3:9d:94:5b:f4:3a:39:95:9a:4c:30:2f
Signer

.text
Size: 1016KB - Virtual size: 1015KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 12B