Licеnce.Lоadеr(РA$S.- 2025) (2025).7z
- SHA256 e0a47d36886ce4fa9d303bc05c9115d089406f07ec37220d40b85088b7fc4879
Password
2025
Static task
static1
1 signatures
General
- Target Licеnce.Lоadеr(РA$S.- 2025) (2025).7z
- Size 1.0MB
- Sample250927-lv6prsyrt2
- SHA256 e0a47d36886ce4fa9d303bc05c9115d089406f07ec37220d40b85088b7fc4879
- MD5 6e43e8168465123b26981ea59bb6edd0
- SHA1 82abcc58711ad60df4f93dddd4af08e77269af82
- SHA512 1bf73f7de3448d9348802e91a210763cf56b03bb39c89ebba591a0c17778683d1b9718e9d0ae746bdda08a979a47cb935dd692b4ac6a0b866aedb5151dc3abaf
- SSDEEP 24576:TRDvV4oegTEDotbKboheDoXg7uhyFM+O5p2rLqbOYTfb9Rls:TmgTEDAbyohTXhhGfSpU2bVJRm
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Licеnce.Lоadеr(РA$S.- 2025)/Licence_Version_Loader.exe
File Explorer
-
Licеnce.Lоadеr(РA$S.- 2025) (2025).7z.7z 1.0MB
-
Licеnce.Lоadеr(РA$S.- 2025)/Licence_Version_Loader.exe.exe 734.9MB
Licеnce.Lоadеr(РA$S.- 2025)/Licence_Version_Loader.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 cf9068680fa47e02a3f369255b5813fb2285cf32d93b366411ecaa6ef015323a
- MD5 31399912399cf8811f1446caa66146c7
- SHA1 5db05040f9d1311d1b55523092a6d206d76000c0
- SHA512 3afc6fa15ce3545c1b61c9ebebee4d143c654a83d943003fe812537f459afbed32c787c0e6f9793e37aa8359052ebfd638eb3a647b6fc4eebe83889c2c687a40
- SSDEEP 49152:ntT9sQpJJ6124HMmv6YrfW/V+PXE39oa6xorVaU1X:ntaNFMmi+fdEoa6xopam
- MD5 SHA1 SHA512 SSDEEP
-
Codesign digest Mismatch
File was altered after it was signed.
Password
2025
PE Signature issue
Digest
3e:28:b3:29:22:4b:8b:48:a9:e7:52:50:bc:15:dc:7f:1e:8d:e5:8c:da:25:40:ec:bb:da:d7:63:f2:31:17:c3
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Huawei Device Co.\, Ltd.,O=Huawei Device Co.\, Ltd.,L=Dongguan,ST=Guangdong,C=CN
Chains
Dec 31, 2024
CN=Huawei Device Co.\, Ltd.,O=Huawei Device Co.\, Ltd.,L=Dongguan,ST=Guangdong,C=CN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2024 - Jul 28, 2038
Subject
CN=Huawei Device Co.\, Ltd.,O=Huawei Device Co.\, Ltd.,L=Dongguan,ST=Guangdong,C=CN
Serial Number
20:86:0e:f8:b3:c4:8b:e3:47:f9:a7:62
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 6, 2023 - Mar 6, 2026
Minor OS version
1
Major OS version
6
Entry point
471424
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
820KB
Virtual Size
819KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
348KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
117KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
217KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ