c1cf64234aa336e8bb5793ccad8e68dda8a5e798ede35a38c2b41dae470a3f48

Sharing

Copy URL Twitter E-mail

General

Target

c1cf64234aa336e8bb5793ccad8e68dda8a5e798ede35a38c2b41dae470a3f48
Size

18KB
MD5

38d9040313c4d47ceef0486f3e809cea
SHA1

50cf59f2295fc386f478bd13a2964c6ac8e00feb
SHA256

c1cf64234aa336e8bb5793ccad8e68dda8a5e798ede35a38c2b41dae470a3f48
SHA512

4fc6acd15b0793e36ae1466e12b2f5a94ba13066036fec758200869b38527c0d7bd3002795f923e66cfa8800c62fd48c084b308e9567ad98a79cc8f50b401447
SSDEEP

384:BPIYiF+gY9e8JN77hhct8IYiF+gIg8JN77hhgVI0:BwYiLY3hOvYiLID3hOa0

Score

1^/10

Malware Config

Signatures

Files

c1cf64234aa336e8bb5793ccad8e68dda8a5e798ede35a38c2b41dae470a3f48
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/07/2021, 00:00

Not After

02/08/2024, 23:59

Subject

CN=Seagull Scientific Inc.,O=Seagull Scientific Inc.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/07/2021, 00:00

Not After

02/08/2024, 23:59

Subject

CN=Seagull Scientific Inc.,O=Seagull Scientific Inc.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ab:69:3e:23:60:5f:0b:a3:97:74:41:3e:82:81:9e:3f:f0:84:aa:52:76:c9:79:96:c6:f5:21:07:59:b4:82:3a
Signer

Actual PE Digest

ab:69:3e:23:60:5f:0b:a3:97:74:41:3e:82:81:9e:3f:f0:84:aa:52:76:c9:79:96:c6:f5:21:07:59:b4:82:3a

Digest Algorithm

sha256

PE Digest Matches

true

c0:17:86:61:40:8b:2e:e9:28:bd:35:30:16:55:65:29:cf:2c:91:01
Signer

Actual PE Digest

c0:17:86:61:40:8b:2e:e9:28:bd:35:30:16:55:65:29:cf:2c:91:01

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\staging\driver\bin\ZPO-r[enu].pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ab:69:3e:23:60:5f:0b:a3:97:74:41:3e:82:81:9e:3f:f0:84:aa:52:76:c9:79:96:c6:f5:21:07:59:b4:82:3aSigner

c0:17:86:61:40:8b:2e:e9:28:bd:35:30:16:55:65:29:cf:2c:91:01Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 300B

.rsrc Size: 2KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:9b:9c:a6:7a:69:56:e4:11:6c:c0:1d:db:e8:86:c6
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ab:69:3e:23:60:5f:0b:a3:97:74:41:3e:82:81:9e:3f:f0:84:aa:52:76:c9:79:96:c6:f5:21:07:59:b4:82:3a
Signer

c0:17:86:61:40:8b:2e:e9:28:bd:35:30:16:55:65:29:cf:2c:91:01
Signer

.rdata
Size: 512B - Virtual size: 300B

.rsrc
Size: 2KB - Virtual size: 1KB