15340675442[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

15340675442.zip
Size

41KB
MD5

355f310e6ebbaa51bb6e7418115edbf2
SHA1

1668f33d9c02700a20c7f34c6bfa7779b7149a69
SHA256

71f47d70bef16564e1a6d6e15074399d292be610f7f725cd47802ade695c7104
SHA512

d2065bf2f34e69cd45b70f4051f0022a8bce4f60783eb71d624c151cc253b77de573e9259929d7d1f788b01b293948d116c1172dc4a773c8fcad98f62ba32e4c
SSDEEP

768:qImEUJ54vw8/oKDFUTSbKIxPg20Qd7jEg7650izN6KIGKbc:q1fezN5U0X7Z76aO6KIu

Score

1^/10

Malware Config

Signatures

Files

15340675442.zip
.zip

Password: infected
1f132eececbe919188d7f86e990a88316416e5bd812ebdcc94ae05944deedfd1
.exe .ps1 windows:4 windows x64 arch:x64 polyglot

Password: infected

Code Sign

36:00:00:01:c9:70:21:b1:86:b7:40:b2:1d:00:02:00:00:01:c9
Certificate

Issuer

CN=AME CS CA 01,0.9.2342.19200300.100.1.25=#1303414d45,0.9.2342.19200300.100.1.25=#130347424c

Not Before

20/03/2023, 20:00

Not After

19/03/2024, 20:00

Subject

CN=Microsoft Azure Code Sign

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1f:00:00:00:51:ea:8f:f6:9c:73:0c:a8:3b:00:00:00:00:00:51
Certificate

Issuer

CN=ameroot,0.9.2342.19200300.100.1.25=#1303414d45,0.9.2342.19200300.100.1.25=#130347424c

Not Before

21/05/2021, 18:44

Not After

21/05/2026, 18:54

Subject

CN=AME CS CA 01,0.9.2342.19200300.100.1.25=#1303414d45,0.9.2342.19200300.100.1.25=#130347424c

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageOCSPSigning
ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

85:38:d5:9a:6b:82:9a:4d:3c:c1:37:bb:97:40:e4:b4:cc:be:55:57:ca:0a:5f:b8:90:91:76:ad:b7:a7:66:36
Signer

Actual PE Digest

85:38:d5:9a:6b:82:9a:4d:3c:c1:37:bb:97:40:e4:b4:cc:be:55:57:ca:0a:5f:b8:90:91:76:ad:b7:a7:66:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\sh\bdpc\0225_103445_0\src\ClientLib\Helper\OpenSourceUtils\IaaSVMILRExeForWindows\obj\amd64\IaaSVMILRExeForWindows.pdb

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

36:00:00:01:c9:70:21:b1:86:b7:40:b2:1d:00:02:00:00:01:c9Certificate

Extended Key Usages

Key Usages

1f:00:00:00:51:ea:8f:f6:9c:73:0c:a8:3b:00:00:00:00:00:51Certificate

Extended Key Usages

Key Usages

85:38:d5:9a:6b:82:9a:4d:3c:c1:37:bb:97:40:e4:b4:cc:be:55:57:ca:0a:5f:b8:90:91:76:ad:b7:a7:66:36Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 291KB - Virtual size: 290KB

.rsrc Size: 2KB - Virtual size: 2KB

36:00:00:01:c9:70:21:b1:86:b7:40:b2:1d:00:02:00:00:01:c9
Certificate

1f:00:00:00:51:ea:8f:f6:9c:73:0c:a8:3b:00:00:00:00:00:51
Certificate

85:38:d5:9a:6b:82:9a:4d:3c:c1:37:bb:97:40:e4:b4:cc:be:55:57:ca:0a:5f:b8:90:91:76:ad:b7:a7:66:36
Signer

.text
Size: 291KB - Virtual size: 290KB

.rsrc
Size: 2KB - Virtual size: 2KB