7f0b3b81f856314a816f0c1e193af71d.zip
- SHA256 37f887acbb55c8b62c414b2d30c55acbd88d96a9e9bdd83a931da3c55f8ecec7
Password
infected
Behavioral task
behavioral1
Sample
cf22bf743239104d52d195763f989fb579de4299a44eaef60ca5c72b6778a8fe.exe
Resource
win7-20240704-en
windows7-x64
13 signatures
150 seconds
General
- Target 7f0b3b81f856314a816f0c1e193af71d.zip
- Size 2.6MB
- Sample240831-dd46lssakc
- SHA256 37f887acbb55c8b62c414b2d30c55acbd88d96a9e9bdd83a931da3c55f8ecec7
- MD5 6289b0cdf743dff137cf25c25e5e081f
- SHA1 9fa8eeb5a6de75e9ea58c8738aeb8a5822bedcc0
- SHA512 a9d0032a821a50ec97dfe22a6c7f62bcc9a0d5c533c50c0850cf776d5e188ff9d24bd646f15c3f1bf5651cbb392cccab83665b3f937a44034145541e0e2563e3
- SSDEEP 49152:CjQ4URKPHZRN8yDameaspJ3R/i9R11rdS0y+rBaba2VOawWdFyPzvfaq9PLyO7Xh:ChURMJ8yGR1X3R/i51rYD+rBaxwWdkPd
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cf22bf743239104d52d195763f989fb579de4299a44eaef60ca5c72b6778a8fe themida
File Explorer
-
7f0b3b81f856314a816f0c1e193af71d.zip.zip 2.6MB
-
cf22bf743239104d52d195763f989fb579de4299a44eaef60ca5c72b6778a8fe.exe 2.6MB
cf22bf743239104d52d195763f989fb579de4299a44eaef60ca5c72b6778a8fe
- SHA256 cf22bf743239104d52d195763f989fb579de4299a44eaef60ca5c72b6778a8fe
- MD5 7f0b3b81f856314a816f0c1e193af71d
- SHA1 a84a152c5211a1f801e868e56f02ff9be52008ef
- SHA512 7b5755e36bce09906e84d3866e3af5a721db95e79052a143fecd33b77e2b0c8475b81a6d0fca2063d9a03a33a090c9f85ccee605c9fc6b0f76668327f214c52b
- SSDEEP 49152:DRcQaZCpd/o5JYLYXzuG5oXb0rm1bkcI1zLxWSdSL5LyHS7PlVn:DRcpZUSTYezPor0rmtmLfSL5+SLlZ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
f3:86:10:bc:f6:a5:68:b6:c9:25:84:37:66:ed:27:65:a2:8d:cd:ed:66:65:d1:38:f7:16:a0:e4:30:05:31:e1
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=155628861,CN=TEFINCOM S.A.,O=TEFINCOM S.A.,STREET=50th Street\, Global Plaza Tower\, 19th Floor\, Suite H,L=Panama,ST=Panama,C=PA,1.2.840.113549.1.9.1=#0c1161646d696e406e6f726476706e2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025041,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Apr 26, 2021
SERIALNUMBER=155628861,CN=TEFINCOM S.A.,O=TEFINCOM S.A.,STREET=50th Street\, Global Plaza Tower\, 19th Floor\, Suite H,L=Panama,ST=Panama,C=PA,1.2.840.113549.1.9.1=#0c1161646d696e406e6f726476706e2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025041,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=155628861,CN=TEFINCOM S.A.,O=TEFINCOM S.A.,STREET=50th Street\, Global Plaza Tower\, 19th Floor\, Suite H,L=Panama,ST=Panama,C=PA,1.2.840.113549.1.9.1=#0c1161646d696e406e6f726476706e2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025041,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:29:15:27:00:00:00:00:00:2a
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=155628861,CN=TEFINCOM S.A.,O=TEFINCOM S.A.,STREET=50th Street\, Global Plaza Tower\, 19th Floor\, Suite H,L=Panama,ST=Panama,C=PA,1.2.840.113549.1.9.1=#0c1161646d696e406e6f726476706e2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025041,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
7b:0f:70:49:63:4b:d8:fd:7f:77:a5:80
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - Jun 13, 2021
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:35:01:ea:17:c5:39:29:8d:be:59:1e:52:8b:f6:60
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 2, 2021 - Mar 6, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
4616976
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
101KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
19KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
4.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=26715,
count=165, id=261, version=26715,
count=18, id=260, version=26715,
count=1, id=263, version=26715,
count=17, id=260, productName=VS2019 v16.2.3 build 27905, version=27905,
count=21, id=259, productName=VS2019 v16.2.3 build 27905, version=27905,
count=42, id=261, productName=VS2019 v16.2.3 build 27905, version=27905,
count=19, id=257, version=26715,
count=147, id=1, productName=Unmarked objects,
count=7, id=265, version=28106,
count=1, id=255, version=28106,
count=1, id=258, version=28106,