Information with details.zip
- SHA256 420d3f4c57c2cd3cbbdeeb8bbcb91145f644d0e986c5ceb9fbdf3fb8d5f0864e
Password
123456
Static task
static1
Behavioral task
behavioral1
Sample
Photo_13-03-2024.scr
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
General
- Target Information with details.zip
- Size 975KB
- Sample240315-p8mqlagg9s
- SHA256 420d3f4c57c2cd3cbbdeeb8bbcb91145f644d0e986c5ceb9fbdf3fb8d5f0864e
- MD5 1fc5487f29ce70ae3271dc0af8db87b6
- SHA1 1b60ef5c4af20bf3cf486990ca8957b192282fa0
- SHA512 225aa98bec365c2bfa18f0b474c9455da3134471a8af25f458496c9577e30baf0846b3ecba9ea96c77e72f21e6549a3fec4491ce49307a34166fd358df06ed01
- SSDEEP 24576:ULMCpRbq4GTymAbzuNQIhYoElJvNu71simeVQHj7YcF:ULdjCyBuNQ0YoElJ1uqie79
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Information with details.zip.zip 975KB
-
Photo_13-03-2024.scr.exe 722.3MB
Photo_13-03-2024.scr
- IMPHASH 80da5f2cb936d867235cd423b189458a
- SHA256 fc785268347a32b7f2ffaa924b970cc470f324087a7ecac8dc60dd2484448174
- MD5 450e85682a1c58ec3e95b0447b25c6ce
- SHA1 417a668d6fd4130c5d059b1ba9f652eb31d61491
- SHA512 91643b96a01d4f73dc15d01290f31d79e1b6ad707bf8db102008aada29c3b1be32c87a0161ad89b2e07638f6651357615bcaf9ade9b8ddab81fa5a29eccf8103
- SSDEEP 6144:7WnQoV8jn894Fz02dAzJLBaLFIILOESiMdo3:748D894Jk9IFu9s
- MD5 SHA1 SHA512 SSDEEP
Password
123456
PE Signature issue
Digest
61:bf:fd:f9:06:0e:93:71:87:fd:f2:53:0a:4a:fc:62:de:3f:70:77:e9:2b:4d:57:5e:bb:19:1e:5a:46:c3:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=50103549581,CN=GL Solutions SIA,O=GL Solutions SIA,L=Lielvārde,ST=Lielvārde Municipality,C=LV,1.3.6.1.4.1.311.60.2.1.3=#13024c56,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 14, 2024
Subject
SERIALNUMBER=50103549581,CN=GL Solutions SIA,O=GL Solutions SIA,L=Lielvārde,ST=Lielvārde Municipality,C=LV,1.3.6.1.4.1.311.60.2.1.3=#13024c56,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
15:b7:d2:56:4f:a1:c2:22:00:75:41:11:c9:44:46:df
Issuer
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 18, 2023 - Dec 17, 2024
Subject
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Issuer
CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 26, 2019 - Mar 22, 2034
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
1
Major OS version
5
Entry point
5501
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetFileSize
WriteConsoleOutputCharacterW
SystemTimeToFileTime
CreateJobObjectW
CreateHardLinkA
FindNextVolumeMountPointA
GlobalAlloc
WideCharToMultiByte
GetLocaleInfoW
GetFileAttributesA
HeapCreate
FreeLibraryAndExitThread
GetLastError
GetCurrentDirectoryW
HeapSize
LocalLock
SetComputerNameA
BuildCommDCBW
GetNumaHighestNodeNumber
ResetEvent
GetAtomNameA
LoadLibraryA
UnhandledExceptionFilter
InterlockedExchangeAdd
GetFileType
ConvertDefaultLocale
GetModuleFileNameA
VirtualProtect
FindAtomW
GetConsoleProcessList
MultiByteToWideChar
LCMapStringW
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
EncodePointer
HeapFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
IsProcessorFeaturePresent
GetStringTypeW
user32
GetMonitorInfoA
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=171, productName=VS2010 build 30319, version=30319,
count=8, id=158, productName=VS2010 build 30319, version=30319,
count=58, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=86, id=1, productName=Unmarked objects,
count=1, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,