website-fglatest.zip
- SHA256 a5c1edad7244086b29cb45eb729458251a5f201fe38fbf171c4cd4cae10555a8
Behavioral task
behavioral1
Sample
website-fglatest/fg805p.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
150 seconds
General
- Target website-fglatest.zip
- Size 7.5MB
- Sample260814-ptmr2stclf
- SHA256 a5c1edad7244086b29cb45eb729458251a5f201fe38fbf171c4cd4cae10555a8
- MD5 3afa151907e51de60dcb9e0218c3f24d
- SHA1 02f6f4d2f767a88e48e3491b6ae5fb179aa70fea
- SHA512 07178a5e451867c4115760c99ca3582ddd9eecb8cf5fd4204256a1080a9fe2d33f368c55b40efb07bad437e745431eab08bcf87d85ea5e999cc6d5370d6b4810
- SSDEEP 98304:521zRXP4BYFIOSafIsiizfhITq8/GUQ2ZfNo9eqU7TODkfXwUp48AyLgDY61ZZuV:+0YP/W1Noog4xA5Y0ZmBXaTsG8
- TLSH T15D86336A3CDF0C3DB1257313ACF6F2893956ADED02131D96B24607CA91E5C912FA239D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/website-fglatest/fg805p.exe themida - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/website-fglatest/fg805p.exe
File Explorer
-
website-fglatest.zip.zip 7.5MB
-
website-fglatest/fg805p.exe.exe 7.8MB
website-fglatest/fg805p.exe
- SHA256 608dddd745143f977becb15a63fb49855b6672e4e53aa87833ca818a159fc1d1
- MD5 db474159bd1cfb8758d7330ec289a9b5
- SHA1 02111473282dfdd6330b32f1a01a0e889306931c
- SHA512 bc34152073e0591643f484f62d9cadbb33808f1ca2e1873a396dfa3e79bc62fe5fb15bd427ddd1941a0bb4e829f1c0bc6f7bca5dc91b947b36a31e6f5db850a4
- SSDEEP 98304:7ZD/3pgXWRqOm7nk6IzBJZ9Y5i874CwmlbjC2XcFlJwWAOJYqxnlO6jqmlR5dVlJ:P2L0pJ2FjPXu3wWtdxkcqc5c+fGhi
- TLSH T1C2863364E44E9DAAC31873F0E5CC91DC29683FA4151E0B47B16B3A9BD177B20384EB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
15:7d:88:0d:f8:e6:ce:1b:51:1e:b2:60:eb:db:42:6d:1b:33:30:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,L=Middletown,ST=New York,C=US
Chains
Aug 16, 2025
CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,L=Middletown,ST=New York,C=US
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,L=Middletown,ST=New York,C=US
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,L=Middletown,ST=New York,C=US
Serial Number
41:20:b2:a2:48:ea:a7:61:4c:9d:2d:e7
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 26, 2022 - Nov 25, 2025
Subject
CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 11, 2025 - Dec 10, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
1
Major OS version
5
Entry point
16285784
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
2.9MB
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
561KB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
250KB
Virtual Size
605KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
41KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
167KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
count=40, id=241, version=40116,
count=208, id=243, version=40116,
count=36, id=242, version=40116,
count=21, productName=Unmarked objects (old),
count=2, id=261, version=23013,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=7, id=199, version=41118,
count=28, id=259, version=24123,
count=39, id=260, version=24123,
count=431, id=261, version=24123,
count=604, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=19, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=47, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=25, version=9210,
count=1009, id=1, productName=Unmarked objects,
count=387, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,