Цитата[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Цитата.zip
Size

543KB
MD5

5c460e4874274e004cb1358b14948ae8
SHA1

632853b7adc7f558472fae59a3e6e79e9c4378cf
SHA256

a397ea09777854429437e8bda2f2b0ac22d6d5dec93418b3b33ce66b33d74576
SHA512

925ab713d36ae88c3f56549cf4a3038c36e6842ec6ce6215ea76cb9d9b2c816da3ec30503f9fbf207c6a8039722ad31b93e3d41541575c7d07e93eb61f82e25e
SSDEEP

12288:XLWLqa44/JMO83ksdDiVRkvJU0qEvzTIVoXNgvVqk0WF5ehB82iE3JKDmbr08b8:7h4/SyHqNnLTavVqknejTP5KmC

Score

1^/10

Malware Config

Signatures

Files

Цитата.zip
.zip
Цитата.exe
.exe windows:4 windows x64 arch:x64

Code Sign

44:58:22:d9:c1:99:f3:5a:f3:bf:4c:72:f8:fb:c0:ef
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=RU

Not Before

22-05-2024 07:34

Not After

22-05-2025 07:34

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:d8:ce:b2:b4:0d:bf:71:e5:8b:ad:25:f3:3c:ce:5a:b1:5d:49:aa:58:5b:2c:d8:cd:bb:d1:d7:97:65:7b:e1
Signer

Actual PE Digest

55:d8:ce:b2:b4:0d:bf:71:e5:8b:ad:25:f3:3c:ce:5a:b1:5d:49:aa:58:5b:2c:d8:cd:bb:d1:d7:97:65:7b:e1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

44:58:22:d9:c1:99:f3:5a:f3:bf:4c:72:f8:fb:c0:efCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

55:d8:ce:b2:b4:0d:bf:71:e5:8b:ad:25:f3:3c:ce:5a:b1:5d:49:aa:58:5b:2c:d8:cd:bb:d1:d7:97:65:7b:e1Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 30KB - Virtual size: 30KB

.rsrc Size: 2KB - Virtual size: 1KB

44:58:22:d9:c1:99:f3:5a:f3:bf:4c:72:f8:fb:c0:ef
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

55:d8:ce:b2:b4:0d:bf:71:e5:8b:ad:25:f3:3c:ce:5a:b1:5d:49:aa:58:5b:2c:d8:cd:bb:d1:d7:97:65:7b:e1
Signer

.text
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 2KB - Virtual size: 1KB