7b684defedd081a8f23bae1441a9c28120b45789e4f56e1abc72619de567aed4[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

7b684defedd081a8f23bae1441a9c28120b45789e4f56e1abc72619de567aed4.exe.zip
Size

18.4MB
MD5

0b60b5a2084e55628ed42471fca6cf1f
SHA1

35447b86bb2e0ec560bafc948785c82061c8aa20
SHA256

45b4a43f501f2b4f2dd763364cced085c8575dcba5d8911510c32f659782a67e
SHA512

5748740419c8e1f754973c8b4c9405f3e8afc3aabdd8c58b8a77113bc5d9c7a8d3446369c07674c8b7e42d4db084e52e0315cfa8aae47d92d275ce3a52651f49
SSDEEP

393216:TIHvsY3WsNAlrruS3mVzzcVeK6JPcW1Vzy5TVOw1lIQVzLWSNScTPUbL:TIHv1GlrySizzcVeKkT3oV3lYPUOL

Score

1^/10

Malware Config

Signatures

Files

7b684defedd081a8f23bae1441a9c28120b45789e4f56e1abc72619de567aed4.exe.zip
.zip

Password: infected
7b684defedd081a8f23bae1441a9c28120b45789e4f56e1abc72619de567aed4.exe
.exe windows:5 windows x86 arch:x86

d35aaf46ab067e39dc24c90fe5e07bdd

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16-03-2016 00:00

Not After

16-03-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:30:23:24:82:ea:69:a8:e8:69:4b:cb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Not Before

12-07-2019 19:28

Not After

12-07-2022 18:58

Subject

CN=McAfee\, Inc.,OU=Engineering,O=McAfee\, Inc.,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:89:c4:13:24:8e:63:d3:a2:78:b4:ea
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

12-07-2019 18:58

Not After

12-07-2022 18:58

Subject

CN=McAfee\, Inc.,OU=Engineering,O=McAfee\, Inc.,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:e8:e9:d3:40:57:3a:c4:55:a8:55:fe:d3:2b:32:57:47:0e:73:b7:7f:9c:14:51:8e:a4:6b:4f:1d:01:e1:cf
Signer

Actual PE Digest

c0:e8:e9:d3:40:57:3a:c4:55:a8:55:fe:d3:2b:32:57:47:0e:73:b7:7f:9c:14:51:8e:a4:6b:4f:1d:01:e1:cf

Digest Algorithm

sha256

PE Digest Matches

true

e2:a4:1b:fe:a3:7c:81:d6:0a:31:0e:4c:ce:bc:a1:d3:10:e6:3c:f6
Signer

Actual PE Digest

e2:a4:1b:fe:a3:7c:81:d6:0a:31:0e:4c:ce:bc:a1:d3:10:e6:3c:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

crypt32

CryptMsgClose

Exports

Exports

_AVClose@4
_AVInitialise@8
_AVRetrieveInstanceInfo@8
_AVScanObject@12
_AVUpdate@8
_RetrieveExtensionLists@16
_RetrieveSingleExtensionList@4

Sections

.MPRESS1
Size: 18.2MB - Virtual size: 41.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

d35aaf46ab067e39dc24c90fe5e07bdd

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51Certificate

Extended Key Usages

Key Usages

30:30:23:24:82:ea:69:a8:e8:69:4b:cbCertificate

Extended Key Usages

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

36:89:c4:13:24:8e:63:d3:a2:78:b4:eaCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c0:e8:e9:d3:40:57:3a:c4:55:a8:55:fe:d3:2b:32:57:47:0e:73:b7:7f:9c:14:51:8e:a4:6b:4f:1d:01:e1:cfSigner

e2:a4:1b:fe:a3:7c:81:d6:0a:31:0e:4c:ce:bc:a1:d3:10:e6:3c:f6Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crypt32

Exports

Exports

Sections

.MPRESS1 Size: 18.2MB - Virtual size: 41.5MB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 142KB - Virtual size: 141KB

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

30:30:23:24:82:ea:69:a8:e8:69:4b:cb
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

36:89:c4:13:24:8e:63:d3:a2:78:b4:ea
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c0:e8:e9:d3:40:57:3a:c4:55:a8:55:fe:d3:2b:32:57:47:0e:73:b7:7f:9c:14:51:8e:a4:6b:4f:1d:01:e1:cf
Signer

e2:a4:1b:fe:a3:7c:81:d6:0a:31:0e:4c:ce:bc:a1:d3:10:e6:3c:f6
Signer

.MPRESS1
Size: 18.2MB - Virtual size: 41.5MB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 142KB - Virtual size: 141KB