16248106294[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

16248106294.zip
Size

232KB
MD5

76300d80251fdc61a58557f4bddc7dea
SHA1

893076818224348ec1f47f1f83b3a8dc89df4515
SHA256

1bbc73e00623cce9657d0dd90de5b5280bf17b2e2f4abbdb93fea0cea4aaca91
SHA512

ff6d0db2a45ab4361aee605f16d26bdc58f7676e006c20c91eb0474174ce18b6c5dae24eb879ff231e815b649f6a869b8f1f9e1f9d633e54d3d9ba1880933ff2
SSDEEP

6144:k/XBRNnllwtPjBlMXcrbEXgyrH3qedEzf3OzyQS:k/nllUP1lAqEbH3dTS

Score

1^/10

Malware Config

Signatures

Files

16248106294.zip
.zip

Password: infected
3808423799ffaa1fb31b3744ed0d8caee92e4960e3ee751e31aef5186909136b
.exe windows:4 windows x64 arch:x64

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:cc:6a:1b:f0:a4:63:e5:de:b2:3b:01
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

23/07/2023, 10:43

Not After

20/06/2026, 08:16

Subject

SERIALNUMBER=516201381,CN=SELA LINES LTD,O=SELA LINES LTD,L=Herzliya,ST=Tel Aviv,C=IL,1.3.6.1.4.1.311.60.2.1.3=#1302494c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:f2:f6:57:b4:fb:28:7a:b4:e0:7c:02:68:5b:77:f8:96:30:49:78:09:82:15:88:ce:f3:78:c0:84:5f:16:3b
Signer

Actual PE Digest

01:f2:f6:57:b4:fb:28:7a:b4:e0:7c:02:68:5b:77:f8:96:30:49:78:09:82:15:88:ce:f3:78:c0:84:5f:16:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\temp\cent\obj\Release\PDF Central.pdb

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

49:cc:6a:1b:f0:a4:63:e5:de:b2:3b:01Certificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

01:f2:f6:57:b4:fb:28:7a:b4:e0:7c:02:68:5b:77:f8:96:30:49:78:09:82:15:88:ce:f3:78:c0:84:5f:16:3bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 580KB - Virtual size: 580KB

.rsrc Size: 104KB - Virtual size: 103KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

49:cc:6a:1b:f0:a4:63:e5:de:b2:3b:01
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

01:f2:f6:57:b4:fb:28:7a:b4:e0:7c:02:68:5b:77:f8:96:30:49:78:09:82:15:88:ce:f3:78:c0:84:5f:16:3b
Signer

.text
Size: 580KB - Virtual size: 580KB

.rsrc
Size: 104KB - Virtual size: 103KB