Hex Editor Neo Ultimate 7.41.00.8634.zip
- SHA256 320198eebb39930eedb6cfb55599ec951932670af6eb4fbd5a33edf8c9d09870
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Hex Editor Neo Ultimate 7.41.00.8634.zip
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hex Editor Neo Ultimate 7.41.00.8634/crack-WD.zip
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
crack/x64/version.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
crack/x86/version.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Hex Editor Neo Ultimate 7.41.00.8634/hex-editor-neo.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral6
Sample
Hex Editor Neo Ultimate 7.41.00.8634/Скачано с 1progs.com.url
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Hex Editor Neo Ultimate 7.41.00.8634.zip
- Size 21.0MB
- Sample240530-bm39kaaa69
- SHA256 320198eebb39930eedb6cfb55599ec951932670af6eb4fbd5a33edf8c9d09870
- MD5 e74bcf2f3314f74279e0a50eb51bf12e
- SHA1 49623b34cfb4ac19cbae4f7a2c503d58fd8740b3
- SHA512 837088de872ac3cc878a065951eb0f93c8ee39f1f3b8ec48927890211af93dd88c8760b4d5c155d35e691adbedb9a5333c8be653cf5f29c18b0d598416b9683e
- SSDEEP 393216:Wbl1ZBw0ioNdTN2681R+e7xc+A8YkrzBz+UrT5o0+Wru6EWhnq:ol1JiofTNu1R+e7xc+XYkBz+AvVEL
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/crack/x64/version.dll unpack002/crack/x86/version.dll
File Explorer
-
Hex Editor Neo Ultimate 7.41.00.8634.zip.zip 21.0MB
-
Hex Editor Neo Ultimate 7.41.00.8634/crack-WD.zip.zip 24KB
-
File_ID.diz884B
-
Warez_Down.nfo11KB
-
crack/x64/version.dll.dll 6KB
-
crack/x86/version.dll.dll 5KB
-
Hex Editor Neo Ultimate 7.41.00.8634/hex-editor-neo.exe.exe 21.0MB
-
Hex Editor Neo Ultimate 7.41.00.8634/Скачано с 1progs.com.url.url 109B
Hex Editor Neo Ultimate 7.41.00.8634/crack-WD.zip
- SHA256 2090940b9f43f145583da71713bdd0e24b62b505c5a135f6745a8d3c95de03c9
- MD5 ae611eb6920c5132659409bf5ec57c94
- SHA1 9aaf45ed094823ee7464b2285626ca6a92975db0
- SHA512 9ff74eab5130f15610b77cac613dd7b3119c84306e4eff0304037dd89e2b444f38bc0eb4cd62333dfd129230a745cf7af99eb95f82b34b7ddffe8a66d13e401d
- SSDEEP 768:NMq6SE7W3omcPxiT/JcLMZmcPxiTpcufxTaq:NMq6SE7+omcPxiT/eoZmcPxiTpcufxT/
- MD5 SHA1 SHA512 SSDEEP
File_ID.diz
- SHA256 7486a02c64992cb084a71a9bd6884ecfe06bd4c38fd8972f77575e9dd4de7499
- MD5 aca62eb10e10076760ffc8a63978c4ae
- SHA1 09f3ffdaadfcaca7f81b2fbcff1305a8bd64e1b2
- SHA512 941c9e921053edd88e4b1fe5cc4e851b3eba328927fb99a76fa753f6edcdaabff868494121dc59f94c6aa2fee217ba4fc0580355e198845b57318c8c3555c155
- MD5 SHA1 SHA512
Warez_Down.nfo
- SHA256 becc340cbd8206cf598941cc74ebb872d4d626bfa6191b42959e4e497c0acb0a
- MD5 20089b7cc446c9a225641a3307bd6e6a
- SHA1 bce132d8e45450b9494be63a7ec9bea4ce0e3350
- SHA512 9973850ecd90820905978e841a621cccd88a25ea8da820c37de06dbe98b33fd4154adefdfcd84862c33c950f2b6cb13fb225bc3a354384fd1d941297fcd84c82
- SSDEEP 96:+eN4D0gdxzKzmXiuxKKzsx6mkSvV8VFqq2LoSvEum2vTR1yhSnLiCf:PIMQ/bqbLSun7R00
- MD5 SHA1 SHA512 SSDEEP
crack/x64/version.dll
- IMPHASH 60513af35aa358aba142ba1358dc7e59
- SHA256 16103c77c7adca3467a9e6f61d9fb701f0c9b30fb1a515e025f7dafe53d488c0
- MD5 5190190af888a1b75c5c05e0aaff9991
- SHA1 e110af6de213ce7430c34ddff426f8e497288dbe
- SHA512 7576270ba92452cac48c74f82e7a7e75d0a628d163adb08d9edbcd9f5f762932f5622186845d0abcffe02f95d3653bceecef86e396acaf43567d20e98fc72a90
- SSDEEP 96:82Cw+MCtViJ830u/jUmcPxiTOW/35NDPStGfyLWw:w4Yo80u/omcPxiTn/355PStGaLW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
5899
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryW
LoadLibraryW
GetCurrentDirectoryA
lstrcatA
lstrcatW
lstrcmpiA
lstrlenW
VirtualProtect
DisableThreadLibraryCalls
imagehlp
ImageNtHeader
psapi
GetModuleBaseNameA
GetFileVersionInfoA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
1010B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
crack/x86/version.dll
- IMPHASH 86b4b811b1bed7377a9b5ff7a731be34
- SHA256 0ab63966a2f4618b289f40237e8f67ae48a1b8c74ea0a622e7ee70627c5d2b34
- MD5 5c24a873b1808116d5a91d751d9792dd
- SHA1 206d73555db287cb3fd942ac07388d3df5741be9
- SHA512 fe124970996e11ccc5bef32f8198499b93fd8143815f62cb13597c2a4c863ca5f2f1611b45541f3308fb97a8e5c98d9a0c9e7bf8bd6d65e64627e58cc721e06e
- SSDEEP 96:XPsqwuf94ikoYNupnmcPxiTOMcufxT4UrcLWwz:VfsxMpnmcPxiTpcufxT47LW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5071
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LoadLibraryA
IsWow64Process
VirtualProtect
lstrcatA
lstrcmpiA
GetSystemDirectoryA
GetSystemWow64DirectoryA
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetCurrentDirectoryA
DisableThreadLibraryCalls
imagehlp
ImageNtHeader
psapi
GetModuleBaseNameA
GetFileVersionInfoA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
906B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
937B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
286B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=18, version=8444,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=86, id=19, version=8078,
Hex Editor Neo Ultimate 7.41.00.8634/hex-editor-neo.exe
- IMPHASH 9da7641a251ed4e6f1102b982119761f
- SHA256 c659127364b80a66102591d3333d9302ce5521a0fa682545207413e4d2abd4b5
- MD5 06a8e92e428588e7501b1c51d2ea8e2d
- SHA1 1420d1604d53f4905c8a8149f89e5599b65d52cd
- SHA512 038b9f3d58e5c947454bee3c17d6199bf6c2f07aa0c69dd591a2a04d39dbd971819e3a5e2da2d8f3ee72d8562b636102599e6fce9a4e1f6ce75fe4b24d2ce9f1
- SSDEEP 393216:Xbl1ZBw0ioNdTN2681R+e7xc+A8YkrzBz+UrT5o0+Wru6EWhny:Ll1JiofTNu1R+e7xc+XYkBz+AvVEH
- MD5 SHA1 SHA512 SSDEEP
Digest
29:95:c0:29:8b:bd:61:ef:c1:35:d5:b6:fb:1b:86:9e:de:95:b4:c5:13:d3:2a:12:df:39:0c:7d:64:57:bd:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d
Chains
Dec 18, 2023
CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=HHD SOFTWARE LIMITED,O=HHD SOFTWARE LIMITED,L=London,ST=London,C=GB,1.2.840.113549.1.9.1=#0c17636f6e7461637440686864736f6674776172652e636f6d
Serial Number
04:f3:0e:3d:a6:cd:84:cd:8f:88:f6:c8
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 27, 2023 - Jun 23, 2026
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 6, 2022 - May 8, 2033
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
1
Major OS version
5
Entry point
32224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\MyProjects\Elizabeth3\out\SfxSetup.pdb
user32
MessageBoxA
shell32
ShellExecuteW
kernel32
EnterCriticalSection
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetLastError
CreateFileW
CloseHandle
ReadFile
WriteFile
SetFilePointer
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
LoadLibraryExW
FindFirstFileW
FindClose
SetFileAttributesW
DeleteFileW
FindNextFileW
RemoveDirectoryW
GetModuleFileNameW
GetCommandLineW
GetTempPathW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateDirectoryW
IsWow64Process
GetCurrentProcess
SetFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
GetVersionExW
SetEnvironmentVariableW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
GetConsoleCP
RtlUnwind
SetLastError
DecodePointer
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
RaiseException
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapAlloc
HeapFree
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=121, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=260, version=26706,
count=18, id=259, version=26706,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=105, id=1, productName=Unmarked objects,
count=36, id=261, version=26706,
count=19, id=264, version=27050,
count=1, id=255, version=27050,
count=1, id=151,
count=1, id=258, version=27050,
Hex Editor Neo Ultimate 7.41.00.8634/Скачано с 1progs.com.url
- SHA256 ebfa6ffd55ef741785a722f9a281542cbd9cc3f64ca7e5be2e431c9ddf056b80
- MD5 37338ce4fe7f242e2c385f3789a57795
- SHA1 c1d11aa67ac32436fef7fa1e770e072bc9b31dd1
- SHA512 ae8f635b483d18cdea2aba3265e0efc84755549a0028c22dfa6685988b88f89b043b885d246aa66a61f64bd0f86ca4e98c85b82965ae81bd723be65cf2928c83
- MD5 SHA1 SHA512