DataView[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

DataView.zip
Size

58.3MB
MD5

f67e8feb7bd50b75a953e4f039e8410a
SHA1

571a5e80368ff4dada72eb7f41cf51759f2bc16b
SHA256

dbceeb35c3197237d40e0d27ff4146bc2587647725abc4177028ec184908d074
SHA512

7774d042d62f5bddff5c0def3160c5d1166164103460a156b59463ff387b1bd786740f708e1962717fdd4688ab1d59ec2db6754da339a23a7f258ca977365100
SSDEEP

1572864:0eZlPma67/+i/E8SkNJoiPv3/cQ78p0UP2hb/1FQdeUE:0eZlPmDDE8NNJdvcQ7OPeb/ok

Score

1^/10

Malware Config

Signatures

Files

DataView.zip
.zip
DataView/setup.COMMON.CONFIG/dataexpert.key
DataView/setupdataview_15.03.00_m01.220111.exe
.exe windows:4 windows x86 arch:x86

d221b1dc8c3a08622f6512e7876527c8

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:bb:ca:5c:3b:32:08:13:35:07:a3:45:01:e7:09:e3
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

10/08/2021, 00:00

Not After

09/08/2024, 23:59

Subject

CN=Bertin GmbH,O=Bertin GmbH,ST=Hessen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

41:45:d9:33:ce:60:8d:c7:19:c6:2c:6f:59:e3:44:b6:de:1c:6d:4a
Signer

Actual PE Digest

41:45:d9:33:ce:60:8d:c7:19:c6:2c:6f:59:e3:44:b6:de:1c:6d:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DataView/setupdataview_15.03.00_m01.220111.pak
DataView/updatedataview.ini

Sharing

General

Malware Config

Signatures

Files

d221b1dc8c3a08622f6512e7876527c8

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

7b:bb:ca:5c:3b:32:08:13:35:07:a3:45:01:e7:09:e3Certificate

Extended Key Usages

Key Usages

41:45:d9:33:ce:60:8d:c7:19:c6:2c:6f:59:e3:44:b6:de:1c:6d:4aSigner

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.gentee Size: 80KB - Virtual size: 79KB

.rsrc Size: 36KB - Virtual size: 33KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

7b:bb:ca:5c:3b:32:08:13:35:07:a3:45:01:e7:09:e3
Certificate

41:45:d9:33:ce:60:8d:c7:19:c6:2c:6f:59:e3:44:b6:de:1c:6d:4a
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.gentee
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 36KB - Virtual size: 33KB