3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc.zip
Size

18.0MB
MD5

65674562a9a8f625bc95c7727aa8fc15
SHA1

032c6ffe1a71bcbd48c0b6135052fd8c99fb4edb
SHA256

3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc
SHA512

ff4844a7c3e17afe5c9edf2f8e1eeeff151eccaa9c90cc79bd50abfe7b91edda46fea2b1d96bc7051b0bcaab80d761dd77b837eb885dbc360adeee66886d926c
SSDEEP

393216:lG7g5vvW61K3C+KA7dCcBGHZjZrld3lvT+jkQ92+CchwGkBzJgT/5l4TKk:lGSvWUA7T6jF73lvTECcRkDgr5l4L

Score

1^/10

Malware Config

Signatures

Files

3fd5d1dbae3317e84733fdd058e03a1e8831b0cb092964dfb113474fb4387efc.zip
.zip

Password: infected
Setup.exe
.exe windows:5 windows x86 arch:x86

Password: infected

23dc713f959c1158acca572218fd62da

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:78:92:33:00:81:b3:a0:06:3f:a6:19:b9:53:9b:76
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

25/11/2021, 00:00

Not After

26/11/2024, 23:59

Subject

CN=Check Point Software Technologies Ltd.,O=Check Point Software Technologies Ltd.,L=Tel Aviv-Yafo,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=Unknown issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

Extended Key Usages

Key Usages

KeyUsageCertSign

0c:10:c6:45:0e:be:ad:5e:58:24:31:b9:ba:04:39:58:21:de:86:65
Signer

Actual PE Digest

0c:10:c6:45:0e:be:ad:5e:58:24:31:b9:ba:04:39:58:21:de:86:65

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\pLJ\uX\authentication\z\c\x64\debug\Yv\cryptocu.pdb

Imports

mpr

WNetGetConnectionW

kernel32

GetCommandLineW
ExitProcess
GetModuleHandleExW
IsDebuggerPresent
IsProcessorFeaturePresent
FindFirstFileExW
RaiseException
RtlUnwind
ExitThread
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
PeekNamedPipe
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
SetEnvironmentVariableW
WriteConsoleW
SetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
lstrlenA
FindResourceExW
SearchPathW
VirtualProtect
GetUserDefaultLCID
SizeofResource
LockResource
LoadResource
FindResourceW
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
CopyFileW
GetLastError
GetWindowsDirectoryW
Sleep
MultiByteToWideChar
CompareFileTime
GetNumberFormatW
GlobalFree
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalLock
GlobalUnlock
CreateHardLinkW
GetFileInformationByHandle
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
GlobalAlloc
CreateFileW
CloseHandle
GetVolumeInformationW
FormatMessageW
LocalFree
DeviceIoControl
GetDriveTypeW
QueryDosDeviceW
GetShortPathNameW
CreateProcessW
WaitForSingleObject
GetModuleFileNameW
FreeResource
lstrcpynW
WideCharToMultiByte
SetEvent
WaitForMultipleObjects
CreateEventW
CreateThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemTime
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LocalAlloc
GlobalGetAtomNameW
FindNextFileW
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
GetFileSizeEx
FileTimeToLocalFileTime
ResumeThread
SuspendThread
SetThreadPriority
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
GetCurrentThread
GetThreadLocale
lstrcmpiW
DuplicateHandle
FindFirstFileW
FindClose
lstrcmpA
GetProfileIntW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
DecodePointer
EncodePointer
GetModuleHandleW
GetModuleHandleA
GetVersion
SetLastError
MulDiv
GlobalSize
CreateDirectoryW
GetCurrentProcess
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
DeleteFileA
AreFileApisANSI
GetTempPathA
GetCurrentProcessId
DeleteFileW
GetVersionExA
OutputDebugStringA
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
ReadFile
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
InitializeCriticalSection
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
LockFile
UnlockFile
InterlockedCompareExchange
HeapFree
QueryPerformanceCounter
HeapAlloc
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
CreateMutexW
GetFileSize
CreateFileA

user32

IsMenu
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
UnionRect
SetCursorPos
NotifyWinEvent
IsZoomed
TrackMouseEvent
MonitorFromPoint
SetParent
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
WaitMessage
UnregisterClassW
RealChildWindowFromPoint
ReuseDDElParam
UnpackDDElParam
DestroyIcon
SetRectEmpty
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
WindowFromPoint
IsClipboardFormatAvailable
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
IsRectEmpty
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IntersectRect
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongW
MapWindowPoints
AdjustWindowRectEx
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
DestroyAcceleratorTable
SetMenu
GetMenu
GetCapture
SetWindowPlacement
GetComboBoxInfo
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
DefWindowProcW
GetMessageTime
DispatchMessageW
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
DrawTextExW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
SetWindowPos
MoveWindow
ShowWindow
SendDlgItemMessageA
UnhookWindowsHookEx
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
LoadIconW
SendMessageW
LoadImageW
LoadCursorW
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
InsertMenuW
GetMenuState
GetMenuStringW
DrawFocusRect
DrawStateW
CopyImage
CharNextW
UpdateWindow
PeekMessageW
RemovePropW
GetPropW
SetPropW
GetMenuItemID
SetMenuDefaultItem
SetClassLongW
GetUpdateRect
HideCaret
InvertRect
RegisterClipboardFormatW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SubtractRect
CharUpperBuffW
UpdateLayeredWindow
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
GetMenuDefaultItem
DeferWindowPos
EqualRect
EndDeferWindowPos
BeginDeferWindowPos
SetWindowRgn
GetAsyncKeyState
DeleteMenu
GetWindowRgn
CreateMenu
TrackPopupMenu
InvalidateRect
GetWindowRect
RegisterWindowMessageW
SetTimer
KillTimer
GetFocus
IsWindowVisible
GetParent
GetMessagePos
DestroyCursor
GetWindowPlacement
TranslateMDISysAccel
OffsetRect
InflateRect
FrameRect
FillRect
DrawIconEx
GetDC
ReleaseDC
GetSysColor
DrawEdge
DrawFrameControl
IsWindow
GetWindowLongW
PostMessageW
GetClientRect
GetSystemMetrics
PtInRect
SetCapture
GetKeyState
ReleaseCapture
InvalidateRgn
SetCursor
CopyRect
DrawTextW
ModifyMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
IsIconic
DrawIcon
GetMenuItemCount
RemoveMenu
RedrawWindow
ScreenToClient
CreatePopupMenu
AppendMenuW
SetWindowLongW
CallWindowProcW
ClientToScreen
GetWindowDC
GetSystemMenu
SetActiveWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
CopyIcon

gdi32

CreateBitmap
CreateHatchBrush
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
SetRectRgn
ScaleViewportExtEx
ScaleWindowExtEx
PatBlt
GetMapMode
DPtoLP
CreateEllipticRgn
Ellipse
GetDeviceCaps
GetTextColor
CreatePolygonRgn
Polygon
Polyline
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreateRectRgn
GetStockObject
CreateFontIndirectW
SetTextColor
CreateRectRgnIndirect
SetPixel
GetTextExtentPoint32W
GetTextMetricsW
CreateSolidBrush
CreateCompatibleDC
GetDIBColorTable
StretchBlt
SelectObject
DeleteDC
SetStretchBltMode
GetObjectW
CreateDCW
CopyMetaFileW
CreatePen
Rectangle
BitBlt
CreateCompatibleBitmap
GetBkColor
CombineRgn
OffsetWindowOrgEx
DeleteObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyExA
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
IsTextUnicode
RegQueryValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA

shell32

DragFinish
ShellExecuteW
CommandLineToArgvW
DragQueryFileW
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHAppBarMessage
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation

comctl32

ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_AddMasked

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground

ole32

OleIsCurrentClipboard
CoRevokeClassObject
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
OleUninitialize
OleInitialize
OleDuplicateData
ReleaseStgMedium
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoUninitialize
CoInitializeEx
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoFreeUnusedLibraries
OleFlushClipboard
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits

netapi32

NetApiBufferFree
NetShareGetInfo

winmm

timeKillEvent
sndPlaySoundW
timeSetEvent
PlaySoundW

psapi

EmptyWorkingSet

ws2_32

getaddrinfo
inet_ntoa
freeaddrinfo
WSACleanup
gethostname
WSAStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionExW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

23dc713f959c1158acca572218fd62da

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

02:78:92:33:00:81:b3:a0:06:3f:a6:19:b9:53:9b:76Certificate

Extended Key Usages

Key Usages

01Certificate

Extended Key Usages

Key Usages

0c:10:c6:45:0e:be:ad:5e:58:24:31:b9:ba:04:39:58:21:de:86:65Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mpr

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

netapi32

winmm

psapi

ws2_32

oleacc

wininet

imm32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 548KB - Virtual size: 547KB

.data Size: 33KB - Virtual size: 66KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.reloc Size: 472KB - Virtual size: 472KB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

02:78:92:33:00:81:b3:a0:06:3f:a6:19:b9:53:9b:76
Certificate

01
Certificate

0c:10:c6:45:0e:be:ad:5e:58:24:31:b9:ba:04:39:58:21:de:86:65
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 548KB - Virtual size: 547KB

.data
Size: 33KB - Virtual size: 66KB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.reloc
Size: 472KB - Virtual size: 472KB