fcba0bc3b7468d6c4441953a08cbb3b24cf344eb74fab0616d321cea5f44a27f

Sharing

Copy URL Twitter E-mail

General

Target

fcba0bc3b7468d6c4441953a08cbb3b24cf344eb74fab0616d321cea5f44a27f
Size

17KB
MD5

4ccf6a4245e0efaf186ab7bf562101ab
SHA1

c04fbe399899221843a5a0bb0c0cbbeba2628a5e
SHA256

fcba0bc3b7468d6c4441953a08cbb3b24cf344eb74fab0616d321cea5f44a27f
SHA512

481dca5bd439bec6977c3d7020eb3566ca725228ce6f34df8f431e60fc8dda334cf93a1a879b90b47232207c07b5b50506040a847b40d1bd20113199325bd241
SSDEEP

384:w1eh2nvPjyUn1msNIYif8ZpH3GCJEmVbfvI/ICMES:woQnXjyY1mtYifiRBEmFvfz

Score

1^/10

Malware Config

Signatures

Files

fcba0bc3b7468d6c4441953a08cbb3b24cf344eb74fab0616d321cea5f44a27f
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

05/04/2024, 00:00

Not After

04/04/2025, 23:59

Subject

SERIALNUMBER=3091871,CN=Freedom Scientific Inc.,O=Freedom Scientific Inc.,L=Clearwater,ST=Florida,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4d:b4:6e:b8:ed:33:87:3b:69:d9:77:26:b9:3e:6d:cf:62:92:09:19:b9:67:8d:44:f5:2c:25:18:e9:6f:c0:92
Signer

Actual PE Digest

4d:b4:6e:b8:ed:33:87:3b:69:d9:77:26:b9:3e:6d:cf:62:92:09:19:b9:67:8d:44:f5:2c:25:18:e9:6f:c0:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GoAgent\pipelines\ZoomText2024_R3_Package\ZoomText\main\WiX projects\ZoomTextSetupPackage\ZoomTextSetupApp\obj\Release\x86\ZoomTextSetupApp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54Certificate

Extended Key Usages

Key Usages

4d:b4:6e:b8:ed:33:87:3b:69:d9:77:26:b9:3e:6d:cf:62:92:09:19:b9:67:8d:44:f5:2c:25:18:e9:6f:c0:92Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54
Certificate

4d:b4:6e:b8:ed:33:87:3b:69:d9:77:26:b9:3e:6d:cf:62:92:09:19:b9:67:8d:44:f5:2c:25:18:e9:6f:c0:92
Signer

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B