caf8d2ebf966d931c49f7d58a68583e46642e0eb7492638b7ca8ca2bc6c4618d[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

caf8d2ebf966d931c49f7d58a68583e46642e0eb7492638b7ca8ca2bc6c4618d.zip
Size

66KB
MD5

07a565ddc6a72a1b3ddf6778a8fc820d
SHA1

b3a115fe0da7e778743586e2cf1513508ecaabe1
SHA256

5f85133fc1f4075f9b530a7a548cc073c9aba7304aadbc5ca7192efa2a73f4e0
SHA512

74b3fa733db68fa0b2c7f1cdf829aa5412e44bad848c9251079c934bcc3c65885ce34571fcb2597c19c3f4fb425c163ca2a0c5fb65aeaef8d31e8d13bac58af6
SSDEEP

1536:NDZe+cVJCJs2r81j49P70nYP4d48XOh97HiTDNcg/4J6d:NDZe3VwzYj49jB4duC6gAJI

Score

1^/10

Malware Config

Signatures

Files

caf8d2ebf966d931c49f7d58a68583e46642e0eb7492638b7ca8ca2bc6c4618d.zip
.zip

Password: threatbook
caf8d2ebf966d931c49f7d58a68583e46642e0eb7492638b7ca8ca2bc6c4618d
.exe windows:4 windows x86 arch:x86

Password: threatbook

af92f0f3ca60a156970ea95d9a6597b8

Code Sign

10:c7:ae:ca:a5:9e:16:4e:9b:29:6e:38:24:f5:0d:33
Certificate

Issuer

CN=Schevertz,OU=Schevertz,O=Schevertz,L=Berlin,C=DE,1.2.840.113549.1.9.1=#0c0f737570706f7274407376747a2e6465

Not Before

22/04/2013, 00:00

Not After

21/04/2014, 23:59

Subject

CN=Schevertz,OU=Schevertz,O=Schevertz,L=Berlin,C=DE,1.2.840.113549.1.9.1=#0c0f737570706f7274407376747a2e6465

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlQueryTimeZoneInformation

ole32

OleInitialize

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: threatbook

Password: threatbook

af92f0f3ca60a156970ea95d9a6597b8

Code Sign

10:c7:ae:ca:a5:9e:16:4e:9b:29:6e:38:24:f5:0d:33Certificate

Extended Key Usages

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

ntdll

ole32

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 512B - Virtual size: 158B

.data Size: 512B - Virtual size: 148B

.rsrc Size: 1024B - Virtual size: 864B

10:c7:ae:ca:a5:9e:16:4e:9b:29:6e:38:24:f5:0d:33
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 512B - Virtual size: 158B

.data
Size: 512B - Virtual size: 148B

.rsrc
Size: 1024B - Virtual size: 864B