ce36f24b7ed2e0741d40a20feb63d72a.zip
- SHA256 28a8ed07b10135e5094a3792ee24fcf7c20994bfc712e2ad6a827fac517ba14d
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
4dbd1787587152a4a413147c100dd4ddaa8b30398e8f3f776278a9ca3d9e8986.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
General
- Target ce36f24b7ed2e0741d40a20feb63d72a.zip
- Size 130KB
- Sample240901-a4c82aveml
- SHA256 28a8ed07b10135e5094a3792ee24fcf7c20994bfc712e2ad6a827fac517ba14d
- MD5 8dc16e50a7900a0e823ce8301bb80dae
- SHA1 786157c7e62ea44c91d0bb7615fa9a3d5380cf3f
- SHA512 e195ea1f8050c69d9cee098e83d596f4754c42a2f03b78c9a527358085522d1da1ea84ce575f76178aeef9076c8732e4d05ebcf4510af516c5abbf27453f9999
- SSDEEP 3072:ijoRmsilAe/SZ4yyuQyQ/baWN1oirgKGNENM4SdoZe1:ijymwe/c4yRQv/bawBOp4SOe1
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
ce36f24b7ed2e0741d40a20feb63d72a.zip.zip 130KB
-
4dbd1787587152a4a413147c100dd4ddaa8b30398e8f3f776278a9ca3d9e8986.exe 155KB
4dbd1787587152a4a413147c100dd4ddaa8b30398e8f3f776278a9ca3d9e8986
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4dbd1787587152a4a413147c100dd4ddaa8b30398e8f3f776278a9ca3d9e8986
- MD5 ce36f24b7ed2e0741d40a20feb63d72a
- SHA1 b54deaa1aec753435374eb2912cb3d4990fb5356
- SHA512 f27630f6683a2f8360c0db838382809cafc55a29329e25904cc5f5fc8ae6620ba5d7f490f3b1a4d36d1be860e2d44caa2dcb67630edac3a9fb220ece37706254
- SSDEEP 3072:iLXxPuabKBDzqS1NZri5GT9Hqnq94JVN69y0WiMm:IX1uabKBDeSAAhHboN69J
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
a0:f4:21:2b:76:ee:d1:5a:15:04:a7:a1:09:30:45:9c:33:24:16:e1:f7:f1:e2:63:4c:66:35:0e:03:75:6c:05
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 31, 2024
PE Signature issue
Digest
39:2f:9a:5f:01:f6:c8:38:2e:f1:86:c6:81:1a:09:3e:43:d5:26:99
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 24, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:AB41-4B27-F026,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:3a:28:a9:62:84:34:04:3a:68:00:00:00:00:01:3a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
147118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ