SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]ZPACK[.]Gen2[.]32128[.]999[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.ZPACK.Gen2.32128.999.exe
Size

2.3MB
MD5

9dccfaa37b7aa55d19b838988db61f25
SHA1

34e9fc647b327565d71a5ff55f938c36024c21ba
SHA256

e50868ad58d4940f71895349ef227baa39b9bb12edb40341d36342f241657609
SHA512

9a1af101926b4b5dcc7cc2ceb5bcd6bab72bc129ba557fe764706c1e1d95e9ad48fda34685a5efb20fa56062fd8e342d2b69f63975ef887b5d7e4544d348857b
SSDEEP

49152:qw6qcXLDhbqmj1/fdA25KNSD713rDsalZpCw0NJ:qwJcXHVt1/xKNe7nZpN0NJ

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.TR.Crypt.ZPACK.Gen2.32128.999.exe
.exe windows:5 windows x86 arch:x86

738653f6c9c2a71598dd695566e4dd2a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

22/10/2021, 00:00

Not After

21/10/2024, 23:59

Subject

CN=Drobiński Maciej Strongrecovery,O=Drobiński Maciej Strongrecovery,ST=Mazowieckie,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

22/10/2021, 00:00

Not After

21/10/2024, 23:59

Subject

CN=Drobiński Maciej Strongrecovery,O=Drobiński Maciej Strongrecovery,ST=Mazowieckie,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:22:f5:ef:95:6f:7f:eb:1f:bf:79:3b:4e:d5:5f:97:65:2f:0b:4d:d9:6d:42:81:31:ed:b6:97:0e:f6:41:e1
Signer

Actual PE Digest

ac:22:f5:ef:95:6f:7f:eb:1f:bf:79:3b:4e:d5:5f:97:65:2f:0b:4d:d9:6d:42:81:31:ed:b6:97:0e:f6:41:e1

Digest Algorithm

sha256

PE Digest Matches

true

69:a9:46:f5:3d:13:f0:72:dc:ce:ed:68:1d:10:d7:23:59:c2:60:49
Signer

Actual PE Digest

69:a9:46:f5:3d:13:f0:72:dc:ce:ed:68:1d:10:d7:23:59:c2:60:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA

winmm

PlaySoundW

wininet

InternetOpenW

version

GetFileVersionInfoSizeW

user32

DrawFocusRect

gdi32

GetStockObject

comdlg32

ChooseColorW

advapi32

AdjustTokenPrivileges

shell32

SHGetSpecialFolderPathW

ole32

OleUninitialize

urlmon

URLDownloadToFileW

comctl32

ImageList_GetIcon

Sections

.text
Size: 1024B - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 515KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

738653f6c9c2a71598dd695566e4dd2a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ac:22:f5:ef:95:6f:7f:eb:1f:bf:79:3b:4e:d5:5f:97:65:2f:0b:4d:d9:6d:42:81:31:ed:b6:97:0e:f6:41:e1Signer

69:a9:46:f5:3d:13:f0:72:dc:ce:ed:68:1d:10:d7:23:59:c2:60:49Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winmm

wininet

version

user32

gdi32

comdlg32

advapi32

shell32

ole32

urlmon

comctl32

Sections

.text Size: 1024B - Virtual size: 736KB

.bss Size: - Virtual size: 96KB

.bss Size: - Virtual size: 8.5MB

.rsrc Size: 515KB - Virtual size: 2.4MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

1e:66:e9:b1:a0:f1:81:e8:74:52:5b:3a:a0:34:b1:07
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ac:22:f5:ef:95:6f:7f:eb:1f:bf:79:3b:4e:d5:5f:97:65:2f:0b:4d:d9:6d:42:81:31:ed:b6:97:0e:f6:41:e1
Signer

69:a9:46:f5:3d:13:f0:72:dc:ce:ed:68:1d:10:d7:23:59:c2:60:49
Signer

.text
Size: 1024B - Virtual size: 736KB

.bss
Size: - Virtual size: 96KB

.bss
Size: - Virtual size: 8.5MB

.rsrc
Size: 515KB - Virtual size: 2.4MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB