out_sig[.]tar[.]gz

Sharing

Copy URL Twitter E-mail

General

Target

out_sig.tar.gz
Size

1.2MB
MD5

3e0134824b36632f67308c9633e21119
SHA1

2b431b575a4d7432959e5ee2223685deea21c329
SHA256

2954b003dcba30071dae4e62c3197671c5b6788139bbee6dc178cb7806ac3ba9
SHA512

36f9fd482d527f951f15026fc2005b7f758add7a60c29d7be81f666e71350d18f0619de622f559e3cc4ddc40bb521df7ed9cc99accc9252744d48728553055aa
SSDEEP

24576:OYIeIYIc3X/3I7dzyUPg08qS98sx75uBNRFLkBCXR8liDcs8Ltrqgr:6lCX/3I7QUPgLJ9x3uViFrqY

Score

1^/10

Malware Config

Signatures

Files

out_sig.tar.gz
.rar

Password: 1658
out_sig.exe
.exe windows:4 windows x86 arch:x86

Password: 1658

180083668cec8cb82f4e76f79e93741b

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/01/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:2e:e3:fd:7c:dc:52:09:7c:1d:a6:af:a8:7c:74:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

04/05/2023, 00:00

Not After

06/05/2026, 23:59

Subject

CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:d3:ba:5e:ea:7e:61:e4:3e:d0:e3:58:7e:90:6f:86:48:8f:8e:0c:41:80:8a:29:de:c2:a7:8d:02:0d:54:81
Signer

Actual PE Digest

e3:d3:ba:5e:ea:7e:61:e4:3e:d0:e3:58:7e:90:6f:86:48:8f:8e:0c:41:80:8a:29:de:c2:a7:8d:02:0d:54:81

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
htons
recv
gethostbyname
WSASetLastError
connect
ioctlsocket
ntohs
getservbyport
getservbyname
send
gethostbyaddr
inet_ntoa
WSAStartup
htonl
getsockname
shutdown
WSACleanup
listen
accept
select
WSAGetLastError
setsockopt
bind
socket
__WSAFDIsSet
closesocket

crypt32

CertOpenSystemStoreA
CertGetCertificateContextProperty
CertFindChainInStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetNameStringA

comctl32

ImageList_Draw
ord17
ImageList_AddMasked
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Merge
ImageList_DragEnter
ImageList_DragLeave
ImageList_BeginDrag
ImageList_DragMove
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_GetIcon

winmm

PlaySoundA
timeSetEvent
timeKillEvent
timeGetTime

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

userenv

LoadUserProfileA
CreateEnvironmentBlock
DestroyEnvironmentBlock

kernel32

ExitProcess
GetComputerNameA
GlobalMemoryStatus
ReleaseSemaphore
GetCurrentDirectoryA
WinExec
GetSystemTime
CreateProcessA
TerminateProcess
SetThreadPriority
OpenEventA
SetProcessShutdownParameters
GetFileAttributesA
CopyFileExA
CreateSemaphoreA
SetLastError
lstrcmpiA
GetCommandLineW
GetCurrentThreadId
TryEnterCriticalSection
SystemTimeToFileTime
SetThreadExecutionState
GetSystemTimeAsFileTime
GetExitCodeProcess
CopyFileA
SetFileAttributesA
RegisterWaitForSingleObject
IsBadWritePtr
OutputDebugStringA
SetCurrentDirectoryA
ExitThread
GetStdHandle
WriteConsoleA
lstrcpynA
TlsGetValue
TlsSetValue
DuplicateHandle
TlsAlloc
lstrcpyA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetVolumeInformationA
GetFullPathNameA
SetVolumeLabelA
GetLocaleInfoA
ReleaseMutex
InterlockedExchange
lstrcatA
FatalExit
GetFileType
HeapValidate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcessId
IsBadReadPtr
SetStdHandle
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetConsoleCP
GetProfileStringA
GetVersion
GetSystemInfo
GetCurrentProcess
GetLocalTime
CreateMutexA
GetCurrentThread
GetTickCount
DeleteFileA
GetTempPathA
FileTimeToLocalFileTime
GetFileTime
FindNextFileA
GetModuleFileNameA
MoveFileA
FindClose
GetLogicalDriveStringsA
FindFirstFileA
CreateDirectoryA
FlushFileBuffers
ReadFile
FileTimeToSystemTime
GetDriveTypeA
WriteFile
SetErrorMode
SetEndOfFile
MoveFileExA
lstrlenA
SetFilePointer
CreateFileA
GetModuleHandleA
GlobalUnlock
GlobalLock
ResumeThread
LocalFree
ResetEvent
Beep
FormatMessageA
WaitForSingleObject
CreateThread
GetExitCodeThread
MulDiv
CreateEventA
Sleep
TerminateThread
GetModuleFileNameW
SleepEx
SetEvent
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetVersionExA
DeleteCriticalSection
CreateToolhelp32Snapshot
Process32Next
EnterCriticalSection
GetSystemDirectoryA
LeaveCriticalSection
OpenProcess
InitializeCriticalSection
Process32First
LoadLibraryA
GlobalFree
GetProcAddress
GetLastError
GlobalAlloc
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
SetEnvironmentVariableA
GetFileInformationByHandle
PeekNamedPipe
GetACP
GetOEMCP
TlsFree
FatalAppExitA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
DebugBreak
WriteConsoleW
OutputDebugStringW
LoadLibraryW
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualQuery
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetConsoleOutputCP
SetEnvironmentVariableW
GetLocaleInfoW
CompareStringA
CompareStringW
UnregisterWait
RemoveDirectoryA

user32

mouse_event
ExitWindowsEx
MessageBoxIndirectA
keybd_event
GetIconInfo
EnumWindows
CloseDesktop
WindowFromPoint
WaitForInputIdle
OpenDesktopA
GetClassNameA
EnumDesktopWindows
PeekMessageA
GetCursorInfo
WaitMessage
VkKeyScanA
MapVirtualKeyA
GetProcessWindowStation
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
SetDlgItemTextW
OffsetRect
IsWindowEnabled
GetLastInputInfo
RemoveMenu
GetMenuState
GetMenuItemID
MessageBoxW
InflateRect
OemToCharA
CharToOemA
wvsprintfA
PostQuitMessage
RegisterWindowMessageA
DrawStateA
ChangeClipboardChain
GetMenuItemInfoA
CreatePopupMenu
AppendMenuA
SetMenuItemInfoA
SetClipboardViewer
GetWindow
InsertMenuItemA
DeleteMenu
GetFocus
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowThreadProcessId
ToAscii
GetKeyState
GetKeyboardState
TrackPopupMenu
GetSubMenu
LoadMenuA
RedrawWindow
GetMenuStringA
GetMenuItemCount
SetMenuDefaultItem
DestroyMenu
ModifyMenuA
SetCapture
LoadStringA
SetClassLongA
GetDesktopWindow
ReleaseCapture
DestroyIcon
GetAsyncKeyState
EnumDisplaySettingsA
BeginDeferWindowPos
EndDeferWindowPos
ClientToScreen
SetParent
ChildWindowFromPoint
SendMessageTimeoutA
GetSysColor
AdjustWindowRectEx
EndPaint
SetCursor
SetWindowRgn
ScreenToClient
GetWindowRect
CreateDialogParamA
RegisterClassExA
LoadBitmapA
GetParent
TrackMouseEvent
GetWindowTextLengthA
DrawEdge
BeginPaint
PtInRect
GetWindowTextA
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
SystemParametersInfoA
MapWindowPoints
CallWindowProcA
MoveWindow
GetCursorPos
SetMenu
GetSystemMetrics
CloseClipboard
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
GetClipboardOwner
GetSystemMenu
SetTimer
IsIconic
FillRect
GetKeyNameTextA
KillTimer
DrawTextA
SetForegroundWindow
InvalidateRgn
wsprintfA
GetClientRect
SetRect
MessageBoxA
ReleaseDC
EnableMenuItem
EndDialog
IsWindow
ShowScrollBar
ScrollWindowEx
IsWindowVisible
SetWindowTextA
LoadImageA
UpdateWindow
EnableWindow
FindWindowA
DialogBoxParamA
SetScrollInfo
CheckMenuItem
CopyRect
DestroyWindow
PostThreadMessageA
SendDlgItemMessageA
LoadIconA
SetFocus
SendMessageA
GetDC
GetUserObjectInformationA
GetThreadDesktop
OpenInputDesktop
SetThreadDesktop
DrawIconEx
GetMessageA
TranslateMessage
DispatchMessageA
AdjustWindowRect
DeferWindowPos
IsRectEmpty
GetForegroundWindow
SetWindowLongA
GetScrollInfo
InvalidateRect
GetWindowLongA
CreateWindowExA
GetDlgItem
DefWindowProcA
ShowWindow
PostMessageA
FlashWindow
LoadCursorA
GetDlgCtrlID
GetDlgItemTextA
SetDlgItemTextA
RegisterClassA
SetWindowPos

gdi32

GetBitmapBits
GdiFlush
GetPixel
GetSystemPaletteEntries
Polygon
UpdateColors
GetTextAlign
SetROP2
TextOutA
PatBlt
GetDIBits
CreateDCA
GetClipBox
GetTextExtentPoint32A
Polyline
LineTo
MoveToEx
CreateFontA
CreatePolygonRgn
SetTextAlign
GetROP2
CreateFontIndirectA
SetBkMode
CreateRoundRectRgn
CreatePen
RoundRect
CreateSolidBrush
CreateRectRgnIndirect
SetPixelV
BitBlt
SetTextColor
DeleteDC
CreateDIBSection
StretchBlt
SetBrushOrgEx
SetBkColor
SetDIBColorTable
CreatePalette
DeleteObject
SelectObject
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap
RealizePalette
SelectPalette
SetStretchBltMode
CreateRectRgn
ExtTextOutA
GetDeviceCaps
Rectangle
GetStockObject
GetObjectA

advapi32

GetSecurityDescriptorControl
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
SetServiceStatus
CreateServiceA
RegisterServiceCtrlHandlerA
DeleteService
StartServiceCtrlDispatcherA
DuplicateTokenEx
SetTokenInformation
FreeSid
OpenSCManagerA
AllocateAndInitializeSid
QueryServiceStatus
EqualSid
CloseServiceHandle
OpenServiceA
AdjustTokenPrivileges
LookupPrivilegeValueA
CreateProcessAsUserA
RegCreateKeyA
RegCloseKey
RegEnumKeyA
GetUserNameA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RevertToSelf
ImpersonateLoggedOnUser
LookupAccountSidA
GetTokenInformation
OpenProcessToken
CryptHashData
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptEncrypt
CryptAcquireContextA
CryptReleaseContext
CryptGetKeyParam
CryptDeriveKey
GetSecurityDescriptorLength

shell32

SHFileOperationA
CommandLineToArgvW
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderPathA
ShellExecuteA
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Shell_NotifyIconA

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1658

Password: 1658

180083668cec8cb82f4e76f79e93741b

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:2e:e3:fd:7c:dc:52:09:7c:1d:a6:af:a8:7c:74:5eCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

e3:d3:ba:5e:ea:7e:61:e4:3e:d0:e3:58:7e:90:6f:86:48:8f:8e:0c:41:80:8a:29:de:c2:a7:8d:02:0d:54:81Signer

Headers

File Characteristics

Imports

ws2_32

crypt32

comctl32

winmm

version

userenv

kernel32

user32

gdi32

advapi32

shell32

ole32

iphlpapi

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 236KB - Virtual size: 234KB

.data Size: 24KB - Virtual size: 405KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:2e:e3:fd:7c:dc:52:09:7c:1d:a6:af:a8:7c:74:5e
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

e3:d3:ba:5e:ea:7e:61:e4:3e:d0:e3:58:7e:90:6f:86:48:8f:8e:0c:41:80:8a:29:de:c2:a7:8d:02:0d:54:81
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 236KB - Virtual size: 234KB

.data
Size: 24KB - Virtual size: 405KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB