6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9

Sharing

Copy URL

Twitter E-mail

General

Target

6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9
Size

4.4MB
MD5

b46a7b7788783baf852a3e2d217395a5
SHA1

2036377a1656073ae9484770e15834bced45cc3d
SHA256

6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9
SHA512

4a85032604b63a6a4571f029aba42e324354522968007806d44aa52aeb99bef391d6cd8f6b8e46f00dfe355c8e406e2df50cce785fc06f08f4b853a5a57125d3
SSDEEP

98304:3mSsCwPee+SN9vYbzrLEFjUZVIVgbIYSSXRZ2dozGFKimh:2SxEe89wfsFwIVgbIYSSXRZ2doaKia

Score

1^/10

Malware Config

Signatures

Files

6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9
.zip

Password: infected
f6c2aabe054b15f6de905da4073abf147627bb156bda1e635061d0ba26b9f80d
.zip
setup/AISetup-Crack.exe
.exe windows:4 windows x86 arch:x86

a8ed6cd4a919571459fdef8972c1855c

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

14-05-2018 10:58

Not After

14-05-2021 10:58

Subject

SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:6b:a3:34:b2:95:92:43:17:23:4e:00:d1:98:e2:5e:01:c4:47:39:70:c5:39:3a:c2:f8:f7:db:96:a6:75:15
Signer

Actual PE Digest

ed:6b:a3:34:b2:95:92:43:17:23:4e:00:d1:98:e2:5e:01:c4:47:39:70:c5:39:3a:c2:f8:f7:db:96:a6:75:15

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

CreateCursor

advapi32

RegisterEventSourceW

mscoree

_CorExeMain

comctl32

PropertySheet

shell32

PathMakeUniqueName

Sections

.shared
Size: - Virtual size: 240KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
setup/Pre-Activated-Setup.exe
.exe windows:5 windows x86 arch:x86

c4d179fd7c3fb3536dc3261464e3c3dc

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

14-05-2018 10:58

Not After

14-05-2021 10:58

Subject

SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:fe:21:62:a2:0c:1b:04:d0:f4:f3:c0:68:21:2b:5a:94:43:6b:70:ed:f6:65:bb:94:6a:a5:65:d0:61:0a:03
Signer

Actual PE Digest

2e:fe:21:62:a2:0c:1b:04:d0:f4:f3:c0:68:21:2b:5a:94:43:6b:70:ed:f6:65:bb:94:6a:a5:65:d0:61:0a:03

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

CreateWindowExW

advapi32

RegQueryValueA

comctl32

ImageList_Create

shell32

SHGetDiskFreeSpaceExW

gdiplus

GdipSaveImageToFile

Sections

.edata
Size: - Virtual size: 5.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 455KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

a8ed6cd4a919571459fdef8972c1855c

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4dCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ed:6b:a3:34:b2:95:92:43:17:23:4e:00:d1:98:e2:5e:01:c4:47:39:70:c5:39:3a:c2:f8:f7:db:96:a6:75:15Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

mscoree

comctl32

shell32

Sections

.shared Size: - Virtual size: 240KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

DATA Size: 101KB - Virtual size: 104KB

c4d179fd7c3fb3536dc3261464e3c3dc

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4dCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

2e:fe:21:62:a2:0c:1b:04:d0:f4:f3:c0:68:21:2b:5a:94:43:6b:70:ed:f6:65:bb:94:6a:a5:65:d0:61:0a:03Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

shell32

gdiplus

Sections

.edata Size: - Virtual size: 5.0MB

.ctors Size: 512B - Virtual size: 4KB

.rsrc Size: 455KB - Virtual size: 2.8MB

.CRT Size: 101KB - Virtual size: 104KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ed:6b:a3:34:b2:95:92:43:17:23:4e:00:d1:98:e2:5e:01:c4:47:39:70:c5:39:3a:c2:f8:f7:db:96:a6:75:15
Signer

.shared
Size: - Virtual size: 240KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

DATA
Size: 101KB - Virtual size: 104KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

2e:fe:21:62:a2:0c:1b:04:d0:f4:f3:c0:68:21:2b:5a:94:43:6b:70:ed:f6:65:bb:94:6a:a5:65:d0:61:0a:03
Signer

.edata
Size: - Virtual size: 5.0MB

.ctors
Size: 512B - Virtual size: 4KB

.rsrc
Size: 455KB - Virtual size: 2.8MB

.CRT
Size: 101KB - Virtual size: 104KB