hdsentinel_setup.zip
- SHA256 27b23007859b0d535106b508feb9b79febfa2f891cff443daa0418ca4cb85b5b
Static task
static1
Behavioral task
behavioral1
Sample
hdsentinel_setup.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
2 signatures
1800 seconds
General
- Target hdsentinel_setup.zip
- Size 34.9MB
- Sample240223-s2167acd44
- SHA256 27b23007859b0d535106b508feb9b79febfa2f891cff443daa0418ca4cb85b5b
- MD5 cfb3d7ca40a5c3624c791b35e8aaaf38
- SHA1 a39123bdcc8e465894b42fd21ad4cc2771a068ab
- SHA512 65e211c864b8f7425d791626e4fc7b4ab63845afeaf9d2ec8b1d86abfe928a04278e8af0b8a3fc73fcd2a0472386ea3a6cbfc64949fbfcfa5967eb6c6c7ad53d
- SSDEEP 786432:+iATvGIlZDROkJJQBZ0mH0xzNgX9/KJlc8yW32ur:YTXlZtOkYZ0a0xz4q3z32A
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
hdsentinel_setup.zip.zip 34.9MB
-
hdsentinel_setup.exe.exe 34.9MB
hdsentinel_setup.exe
- SHA256 df8615fa9e63f9d1b471191c074f93cf9ad7fafe6beb3d7d6a45183437eb3fa5
- MD5 67b62d83ac137b6a32127508c22214f9
- SHA1 8a805eab8b5cb6c40db0c771ceb9f56bf4285b94
- SHA512 cc7f44d9189660f02989c2e80ca303dedde89423a07ea3aaa0b2b86f75f9fae31bdc1c7040052ef72266ea4f1355de24ed491583e5949de1828a347dd0eb94ae
- SSDEEP 786432:VK0zdW6/Z5TqkNJmnJ6yLWzrFGRbLyT/uyymbU7Q:7zV/ZNqkaJ64WzrKGz/bUM
- MD5 SHA1 SHA512 SSDEEP
Digest
4d:e0:7b:a2:84:d2:5a:92:93:60:e2:23:95:1c:11:6c:bb:cb:bd:14:1c:d2:ae:7c:f3:3b:b4:9a:41:40:0f:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Janos Mathe,O=Janos Mathe,POSTALCODE=8142,STREET=34 Dozsa str.,L=Urhida,ST=Fejer,C=HU
Chains
Feb 2, 2023
CN=Janos Mathe,O=Janos Mathe,POSTALCODE=8142,STREET=34 Dozsa str.,L=Urhida,ST=Fejer,C=HU
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
PE Signature issue
Digest
56:07:d9:99:69:3a:96:33:b3:6c:42:cb:56:5f:70:e6:af:73:ef:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Janos Mathe,O=Janos Mathe,POSTALCODE=8142,STREET=34 Dozsa str.,L=Urhida,ST=Fejer,C=HU
Chains
Feb 23, 2024
Subject
CN=Janos Mathe,O=Janos Mathe,POSTALCODE=8142,STREET=34 Dozsa str.,L=Urhida,ST=Fejer,C=HU
Serial Number
d3:dc:c1:14:35:e0:25:2f:9e:0a:53:20:39:fe:0c:cc
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2019 - Sep 12, 2023
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Janos Mathe,O=Janos Mathe,POSTALCODE=8142,STREET=34 Dozsa str.,L=Urhida,ST=Fejer,C=HU
Serial Number
d3:dc:c1:14:35:e0:25:2f:9e:0a:53:20:39:fe:0c:cc
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2019 - Sep 12, 2023
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
1
Entry point
40000
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ