13062024_0149_ACTA No. 0124000157695484408.pdf.rar
- SHA256 ebda275d549d304a3d41adab808c30fda7118dff57ec9d2110e9381cfcd1820f
Password
4408
Static task
static1
Behavioral task
behavioral1
Sample
ACTA No. 0124000157695484408.pdf.exe
Resource
win7-20240419-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ACTA No. 0124000157695484408.pdf.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target 13062024_0149_ACTA No. 0124000157695484408.pdf.rar
- Size 4.3MB
- Sample240613-b8yafazelf
- SHA256 ebda275d549d304a3d41adab808c30fda7118dff57ec9d2110e9381cfcd1820f
- MD5 653decaaaa15d1d6b39ca73d71366844
- SHA1 6c571dd3e348237cdaf22ce9f9bcb3bd6b31a480
- SHA512 b4aa7babd7bec8be569055a9d6bed041718abe3ea2a8dcf9921fe0bc385a438a55c060ebd92e5713c1cbb94ee0f11a3390c16c330eda70647270664508637d0f
- SSDEEP 98304:9F7iv+Gvtltldt2zSZ4MBgGK6ynMjyHwBHcVl:9iltlv2OSdIjyQBGl
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
13062024_0149_ACTA No. 0124000157695484408.pdf.rar.rar 4.3MB
-
ACTA No. 0124000157695484408.pdf.exe.exe 4.4MB
ACTA No. 0124000157695484408.pdf.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d0d13be890e9642e8301282526792678c6c70f859c303edc5a30d64a647d96c3
- MD5 d2eac7d1ee95dcf3cf767693809673ac
- SHA1 719adc9510031e2de99fe3efe39395fa6c1d77c0
- SHA512 754e8548b986d031ccd7b519ef62e0e0691c28d0ff4c99a141f86db4496423725f65c6361906af9a762bf6d1764c3e57ab69e0dabe1b02385d21722db8b58c2e
- SSDEEP 98304:fWjhKNP9zwVbGMnILcFFUOoSge/Fn6CexEDUfX/dxuROUd9xHW2Gb6bRe:f6KRJwVvIcFFUOoMFnnSEYfX/dxusU9c
- MD5 SHA1 SHA512 SSDEEP
Password
4408
PE Signature issue
Digest
0e:68:08:13:aa:5a:38:92:39:9d:cd:9b:6b:31:8a:8e:85:91:3e:9c:d6:85:ba:4e:8e:28:9b:79:f9:4d:a9:2f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Glarysoft LTD,OU=IT,O=Glarysoft LTD,ST=Beijing,C=CN
Chains
Dec 23, 2022
CN=Glarysoft LTD,OU=IT,O=Glarysoft LTD,ST=Beijing,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
18:de:cd:c7:32:18:27:69:91:16:f3:5a:e9:77:c2:bc:f6:ce:90:4c
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Glarysoft LTD,O=Glarysoft LTD,ST=Beijing,C=CN
Chains
Dec 23, 2022
Subject
CN=Glarysoft LTD,O=Glarysoft LTD,ST=Beijing,C=CN
Serial Number
0f:05:ae:21:cd:c1:7b:9f:3c:f0:9d:7b:fc:65:9b:a3
Issuer
CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 19, 2020 - Feb 17, 2023
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2011 - Feb 10, 2026
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=Glarysoft LTD,OU=IT,O=Glarysoft LTD,ST=Beijing,C=CN
Serial Number
06:06:79:fd:2c:2e:aa:69:21:0f:c6:b7:95:ad:64:2f
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 18, 2020 - Feb 17, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
4628270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ