4b1940d1d48da34c2bd0d60403181786[.]tar

Sharing

Copy URL

Twitter E-mail

General

Target

4b1940d1d48da34c2bd0d60403181786.tar
Size

15.2MB
MD5

4b1940d1d48da34c2bd0d60403181786
SHA1

78ddadb5453d7c53c27e344c81177272b43e84d8
SHA256

e5203f6c2432034e7a18f9580294f5ca3276820f9c3d6dfdcada441c14784fc2
SHA512

3c72c9867bec19f88a8d3e41249188e84d7e3462aef060f9e883266c101d95eae86999c2425366b06a54803a28c34662f063362f0c3db35dc44456d007b7d828
SSDEEP

393216:7x8jDlChSbcoC8EnDpIiBsRdJihMHviBbpZ32:NgamdEnlIqs/fHKBNZ32

Score

1^/10

Malware Config

Signatures

Files

4b1940d1d48da34c2bd0d60403181786.tar
.rar

Password: 3082
3082-INSTANCIA No. 7590-2024..exe
.exe windows:4 windows x86 arch:x86

Password: 3082

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01-09-1998 12:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19-09-2018 00:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28-07-2020 00:00

Not After

18-03-2029 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:00:d7:4b:2c:e1:15:62:18:ee:a3:0d
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

23-01-2024 10:24

Not After

12-03-2025 16:08

Subject

SERIALNUMBER=01524500442,CN=Enter Srl,OU=Enter Srl,O=Enter Srl,STREET=VIA CARLO ALBERTO DALLA CHIESA 18,L=Grottammare,ST=Ascoli Piceno,C=IT,1.2.840.113549.1.9.1=#0c13612e746f7a7a6940656e74657273726c2e6974,1.3.6.1.4.1.311.60.2.1.3=#13024954,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02-11-2023 10:30

Not After

04-12-2034 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:a7:0d:4c:49:3c:18:fb:c3:cb:3d:ff:04:33:b1:4f:a1:a5:17:72:bf:5b:ae:fe:0c:ee:50:f7:da:e5:34:9a
Signer

Actual PE Digest

45:a7:0d:4c:49:3c:18:fb:c3:cb:3d:ff:04:33:b1:4f:a1:a5:17:72:bf:5b:ae:fe:0c:ee:50:f7:da:e5:34:9a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.2MB - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 3082

Password: 3082

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:15:4b:5a:c3:94Certificate

Key Usages

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

56:00:d7:4b:2c:e1:15:62:18:ee:a3:0dCertificate

Extended Key Usages

Key Usages

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

45:a7:0d:4c:49:3c:18:fb:c3:cb:3d:ff:04:33:b1:4f:a1:a5:17:72:bf:5b:ae:fe:0c:ee:50:f7:da:e5:34:9aSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 15.2MB - Virtual size: 15.2MB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

56:00:d7:4b:2c:e1:15:62:18:ee:a3:0d
Certificate

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

45:a7:0d:4c:49:3c:18:fb:c3:cb:3d:ff:04:33:b1:4f:a1:a5:17:72:bf:5b:ae:fe:0c:ee:50:f7:da:e5:34:9a
Signer

.text
Size: 15.2MB - Virtual size: 15.2MB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 512B - Virtual size: 12B