General

  • Target
    certifio-manager-2.2.4.exe
  • Size 110.4MB
  • Sample260821-yq2apsdb62
  • SHA256 d0df04e819a7e15007fb1d6ce91fbbb92e17b6b348d0662c87b8e3d23d36d781
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • certifio-manager-2.2.4.exe
    .exe 110.4MB
  • certifio-manager-2.2.4.jar
    .jar 72.8MB
  • certifio-manager.cmd
    342B
  • certifio-manager.exe
    .exe 382KB
  • config/application.properties
    2KB
  • config/icon.ico
    361KB
  • config/icon.png
    .png 337B
  • config/log4j2-file.xml
    .xml 944B
  • dll/IDPrimePKCS11.dll
    .dll 25KB
  • dll/PKCS11Wrapper.dll
    .dll 97KB
  • dll/eTPKCS11.dll
    .dll 25KB
  • dll/eToken.dll
    .dll 826KB
  • dll/jnicapi.dll
    .dll 70KB
  • jre/ASSEMBLY_EXCEPTION
    1KB
  • jre/LICENSE
    18KB
  • jre/THIRD_PARTY_README
    154KB
  • jre/bin/api-ms-win-core-console-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-datetime-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-debug-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-file-l1-1-0.dll
    .dll 18KB
  • jre/bin/api-ms-win-core-file-l1-2-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-file-l2-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-handle-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-heap-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-localization-l1-2-0.dll
    .dll 17KB
  • jre/bin/api-ms-win-core-memory-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 16KB
  • jre/bin/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-profile-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-string-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-synch-l1-1-0.dll
    .dll 16KB
  • jre/bin/api-ms-win-core-synch-l1-2-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-core-timezone-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-core-util-l1-1-0.dll
    .dll 14KB
  • jre/bin/api-ms-win-crt-conio-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-crt-convert-l1-1-0.dll
    .dll 18KB
  • jre/bin/api-ms-win-crt-environment-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 16KB
  • jre/bin/api-ms-win-crt-heap-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-crt-locale-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-crt-math-l1-1-0.dll
    .dll 25KB
  • jre/bin/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 22KB
  • jre/bin/api-ms-win-crt-private-l1-1-0.dll
    .dll 68KB
  • jre/bin/api-ms-win-crt-process-l1-1-0.dll
    .dll 15KB
  • jre/bin/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 19KB
  • jre/bin/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 20KB
  • jre/bin/api-ms-win-crt-string-l1-1-0.dll
    .dll 20KB
  • jre/bin/api-ms-win-crt-time-l1-1-0.dll
    .dll 17KB
  • jre/bin/api-ms-win-crt-utility-l1-1-0.dll
    .dll 15KB
  • jre/bin/awt.dll
    .dll 1.2MB
  • jre/bin/concrt140.dll
    .dll 241KB
  • jre/bin/decora_sse.dll
    .dll 69KB
  • jre/bin/dt_shmem.dll
    .dll 33KB
  • jre/bin/dt_socket.dll
    .dll 29KB
  • jre/bin/fontmanager.dll
    .dll 245KB
  • jre/bin/freetype.dll
    .dll 554KB
  • jre/bin/glass.dll
    .dll 216KB
  • jre/bin/hprof.dll
    .dll 134KB
  • jre/bin/instrument.dll
    .dll 172KB
  • jre/bin/j2pcsc.dll
    .dll 23KB
  • jre/bin/j2pkcs11.dll
    .dll 63KB
  • jre/bin/jaas_nt.dll
    .dll 26KB
  • jre/bin/jabswitch.exe
    .exe 40KB
  • jre/bin/java-rmi.exe
    .exe 23KB
  • jre/bin/java.dll
    .dll 141KB
  • jre/bin/java.exe
    .exe 245KB
  • jre/bin/java_crw_demo.dll
    .dll 31KB
  • jre/bin/javafx_font.dll
    .dll 62KB
  • jre/bin/javafx_iio.dll
    .dll 140KB
  • jre/bin/javaw.exe
    .exe 245KB
  • jre/bin/jawt.dll
    .dll 20KB
  • jre/bin/jdwp.dll
    .dll 173KB
  • jre/bin/jjs.exe
    .exe 23KB
  • jre/bin/jli.dll
    .dll 217KB
  • jre/bin/jpeg.dll
    .dll 145KB
  • jre/bin/jsdt.dll
    .dll 23KB
  • jre/bin/jsound.dll
    .dll 39KB
  • jre/bin/jsoundds.dll
    .dll 33KB
  • jre/bin/keytool.exe
    .exe 23KB
  • jre/bin/kinit.exe
    .exe 23KB
  • jre/bin/klist.exe
    .exe 23KB
  • jre/bin/ktab.exe
    .exe 23KB
  • jre/bin/lcms.dll
    .dll 206KB
  • jre/bin/management.dll
    .dll 41KB
  • jre/bin/mlib_image.dll
    .dll 574KB
  • jre/bin/msvcp140.dll
    .dll 438KB
  • jre/bin/net.dll
    .dll 90KB
  • jre/bin/nio.dll
    .dll 58KB
  • jre/bin/npt.dll
    .dll 24KB
  • jre/bin/orbd.exe
    .exe 23KB
  • jre/bin/pack200.exe
    .exe 23KB
  • jre/bin/policytool.exe
    .exe 23KB
  • jre/bin/prism_common.dll
    .dll 59KB
  • jre/bin/prism_d3d.dll
    .dll 120KB
  • jre/bin/prism_es2.dll
    .dll 46KB
  • jre/bin/prism_sw.dll
    .dll 94KB
  • jre/bin/rmid.exe
    .exe 23KB
  • jre/bin/rmiregistry.exe
    .exe 23KB
  • jre/bin/server/Xusage.txt
    1KB
  • jre/bin/server/jvm.dll
    .dll 6.1MB
  • jre/bin/servertool.exe
    .exe 23KB
  • jre/bin/splashscreen.dll
    .dll 188KB
  • jre/bin/sunec.dll
    .dll 142KB
  • jre/bin/sunmscapi.dll
    .dll 39KB
  • jre/bin/tnameserv.exe
    .exe 23KB
  • jre/bin/ucrtbase.dll
    .dll 883KB
  • jre/bin/unpack.dll
    .dll 74KB
  • jre/bin/unpack200.exe
    .exe 179KB
  • jre/bin/vcruntime140.dll
    .dll 74KB
  • jre/bin/verify.dll
    .dll 48KB
  • jre/bin/w2k_lsa_auth.dll
    .dll 29KB
  • jre/bin/zip.dll
    .dll 82KB
  • jre/lib/accessibility.properties
    149B
  • jre/lib/calendars.properties
    2KB
  • jre/lib/charsets.jar
    .jar 3.0MB
  • jre/lib/classlist
    82KB
  • jre/lib/cmm/CIEXYZ.pf
    784B
  • jre/lib/cmm/GRAY.pf
    556B
  • jre/lib/cmm/LINEAR_RGB.pf
    488B
  • jre/lib/cmm/PYCC.pf
    228KB
  • jre/lib/cmm/sRGB.pf
    6KB
  • jre/lib/content-types.properties
    5KB
  • jre/lib/currency.data
    4KB
  • jre/lib/ext/access-bridge-32.jar
    .jar 192KB
  • jre/lib/ext/access-bridge.jar
    .jar 192KB
  • jre/lib/ext/cldrdata.jar
    .jar 3.7MB
  • jre/lib/ext/dnsns.jar
    .jar 8KB
  • jre/lib/ext/jaccess.jar
    .jar 43KB
  • jre/lib/ext/jfxrt.jar
    .jar 8.6MB
  • jre/lib/ext/localedata.jar
    .jar 1.1MB
  • jre/lib/ext/meta-index
    779B
  • jre/lib/ext/nashorn.jar
    .jar 1.9MB
  • jre/lib/ext/sunec.jar
    .jar 38KB
  • jre/lib/ext/sunjce_provider.jar
    .jar 270KB
  • jre/lib/ext/sunmscapi.jar
    .jar 43KB
  • jre/lib/ext/sunpkcs11.jar
    .jar 275KB
  • jre/lib/ext/zipfs.jar
    .jar 70KB
  • jre/lib/flavormap.properties
    3KB
  • jre/lib/fontconfig.bfc
    3KB
  • jre/lib/fontconfig.properties.src
    11KB
  • jre/lib/hijrah-config-umalqura.properties
    14KB
  • jre/lib/i386/jvm.cfg
    41B
  • jre/lib/images/cursors/cursors.properties
    1KB
  • jre/lib/images/cursors/invalid32x32.gif
    .gif 153B
  • jre/lib/images/cursors/win32_CopyDrop32x32.gif
    .gif 165B
  • jre/lib/images/cursors/win32_CopyNoDrop32x32.gif
    .gif 153B
  • jre/lib/images/cursors/win32_LinkDrop32x32.gif
    .gif 168B
  • jre/lib/images/cursors/win32_LinkNoDrop32x32.gif
    .gif 153B
  • jre/lib/images/cursors/win32_MoveDrop32x32.gif
    .gif 147B
  • jre/lib/images/cursors/win32_MoveNoDrop32x32.gif
    .gif 153B
  • jre/lib/javafx.properties
    56B
  • jre/lib/jce.jar
    .jar 94KB
  • jre/lib/jfr.jar
    .jar 868KB
  • jre/lib/jfr/default.jfc
    .xml 28KB
  • jre/lib/jfr/profile.jfc
    .xml 28KB
  • jre/lib/jfxswt.jar
    .jar 33KB
  • jre/lib/jsse.jar
    .jar 1.8MB
  • jre/lib/jvm.hprof.txt
    4KB
  • jre/lib/logging.properties
    2KB
  • jre/lib/management-agent.jar
    .jar 379B
  • jre/lib/management/jmxremote.access
    3KB
  • jre/lib/management/jmxremote.password.template
    2KB
  • jre/lib/management/management.properties
    14KB
  • jre/lib/management/snmp.acl.template
    3KB
  • jre/lib/meta-index
    1KB
  • jre/lib/net.properties
    5KB
  • jre/lib/psfont.properties.ja
    3KB
  • jre/lib/psfontj2d.properties
    11KB
  • jre/lib/resources.jar
    .jar 3.4MB
  • jre/lib/rt.jar
    .jar 60.3MB
  • jre/lib/security/blacklisted.certs
    2KB
  • jre/lib/security/cacerts
    172KB
  • jre/lib/security/java.policy
    2KB
  • jre/lib/security/java.security
    54KB
  • jre/lib/security/policy/limited/US_export_policy.jar
    .jar 619B
  • jre/lib/security/policy/limited/local_policy.jar
    .jar 1KB
  • jre/lib/security/policy/unlimited/US_export_policy.jar
    .jar 619B
  • jre/lib/security/policy/unlimited/local_policy.jar
    .jar 637B
  • jre/lib/sound.properties
    1KB
  • jre/lib/tzdb.dat
    101KB
  • jre/lib/tzmappings
    9KB
  • jre/release
    93B
  • jre/version.txt
    11B
  • uninstaller.exe
    .exe 411KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB

certifio-manager-2.2.4.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 d0df04e819a7e15007fb1d6ce91fbbb92e17b6b348d0662c87b8e3d23d36d781
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4f:4a:52:16:b2:a4:45:c3:b6:eb:4d:44:5f:41:71:e5:f2:01:5c:17:9e:32:0e:d1:ae:ab:bb:31:9c:6c:95:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1168439967,CN=Solutions Notarius Inc,O=Solutions Notarius Inc,L=Montreal,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1306517565626563,1.3.6.1.4.1.311.60.2.1.3=#13024341
Minor OS version
0
Major OS version
4
Entry point
13618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths