a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de.zip
Size

116KB
MD5

92cd72bc9f02cfbdb432055ecb42707f
SHA1

d5150f6190e11118c8c75fdd266dbc6584103679
SHA256

304a6ae31de8154aaf18fa3ba46f4d768a68fabaca443868e1a447e6e51cfc26
SHA512

217aa4abc39471c7826b68c3ee2b2e3999be41e4724563a2ca302cf7ad7c8f9bee06ed7e7b64d7dd8cf3900bd312ebcd509c70b4400357343e01a10642a03fcc
SSDEEP

3072:gmXkGd/hgbL9xWeWtcpnFn8KoVDe3cgAAJ+qE82lWc1:gmXkGdhgbpRpnFgsMgAAJ+v8271

Score

1^/10

Malware Config

Signatures

Files

a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de.zip
.zip

Password: infected
a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de.exe
.exe windows:4 windows x86 arch:x86

a3fa052973ac3ee7a8fba7129b9455f1

Code Sign

5c:d5:ed:8d:72:d8:c4:97:49:bd:6c:7e:aa:6f:4e:a2
Certificate

Issuer

CN=MUAEKVDCXZHXNVHCZC

Not Before

21-11-2020 07:47

Not After

31-12-2039 23:59

Subject

CN=MUAEKVDCXZHXNVHCZC

Extended Key Usages

ExtKeyUsageCodeSigning

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:23:af:a0:18:83:5e:20:32:c7:c9:77:8e:b1:5e:28:6c:a9:02:9b:bd:5f:0c:d3:8f:9d:52:1b:1e:0c:a2:d9
Signer

Actual PE Digest

15:23:af:a0:18:83:5e:20:32:c7:c9:77:8e:b1:5e:28:6c:a9:02:9b:bd:5f:0c:d3:8f:9d:52:1b:1e:0c:a2:d9

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
VirtualAllocEx
GetModuleFileNameA
GetStartupInfoA

user32

LoadIconA

gdi32

GetStockObject
GetEnhMetaFileBits
GetEnhMetaFileW
CreateSolidBrush
AddFontResourceA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyW
RegQueryValueExA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp

imm32

ImmGetContext
ImmGetVirtualKey
ImmSetOpenStatus

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

a3fa052973ac3ee7a8fba7129b9455f1

Code Sign

5c:d5:ed:8d:72:d8:c4:97:49:bd:6c:7e:aa:6f:4e:a2Certificate

Extended Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

15:23:af:a0:18:83:5e:20:32:c7:c9:77:8e:b1:5e:28:6c:a9:02:9b:bd:5f:0c:d3:8f:9d:52:1b:1e:0c:a2:d9Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

imm32

Sections

.text Size: 143KB - Virtual size: 143KB

.rdata Size: 684KB - Virtual size: 683KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 36KB - Virtual size: 36KB

5c:d5:ed:8d:72:d8:c4:97:49:bd:6c:7e:aa:6f:4e:a2
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

15:23:af:a0:18:83:5e:20:32:c7:c9:77:8e:b1:5e:28:6c:a9:02:9b:bd:5f:0c:d3:8f:9d:52:1b:1e:0c:a2:d9
Signer

.text
Size: 143KB - Virtual size: 143KB

.rdata
Size: 684KB - Virtual size: 683KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 36KB - Virtual size: 36KB