RollbackDolby-v1.2.0.81-20260626.rar
- SHA256 1002b1af8d44a395083e97ce9b1c5b4023c7523cfda85804c207fd6c92d779de
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RollbackDolby-v1.2.0.81-20260626.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
48 signatures
900 seconds
Behavioral task
behavioral2
Sample
RollbackDolby-v1.2.0.81-20260626.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral3
Sample
RollbackDolby.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
RollbackDolby.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
General
- Target RollbackDolby-v1.2.0.81-20260626.rar
- Size 5.8MB
- Sample260919-pkgjns1sax
- SHA256 1002b1af8d44a395083e97ce9b1c5b4023c7523cfda85804c207fd6c92d779de
- MD5 6ee1baa128b387c0f87ccd44a3e7789a
- SHA1 2de10772f6f7ac78ad50ff004bdacf435ac31052
- SHA512 14afbecda190b508e487fb4d69d346d30776346caf7cfe8f8903bae278a8b48864b80b88f6b72a5943fe2dd419c2c9a59d9b65ed4a243965fc702830cdf56499
- SSDEEP 98304:q/THK7kDOqoJhJOvtnbOrAvgVDd4+K7mUf6pqNZ0naS/PqUSz4nsw99jVd7roq4S:aK7kDoJQtbOrdVDm5TqqN2naS/PqUSzK
- TLSH T1025633BF391A001967ACC1BC4B566ADE9D0839FFA1C4FB577902A2D5A14B37101FB94C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/RollbackDolby.exe
File Explorer
-
RollbackDolby-v1.2.0.81-20260626.rar.rar 5.8MB
-
RollbackDolby.exe.exe 7.4MB
RollbackDolby.exe
- SHA256 45cbc4c70c22d67f12a648a1e23f2026e6b3e21bfdb824765fbb3ec69c5cd7b3
- MD5 516e1641075437f7612226e0aace5b06
- SHA1 9d1a7d13f37271bb7697fdd9afdf26c233759a1b
- SHA512 ba2f2c8f6f5f79e3a54a5a32a89ade7112919b76f35a52d4cddaa2e3240810c5afc0da6b998532da474b915d3acdf61912801e569a2e107b6219ca785e22cfac
- SSDEEP 196608:V26oiVEmXl+mJTBXgk0UvKklH+t3CyKcmnhr2gm:V2nia6vppgk0UvKv3CHcmnAgm
- TLSH T12A762335C64018B2C53B3531327A8615E15A5E032A2ABB5F1729F2583C763C2EFB5FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
15:2d:ba:f5:a5:dc:e4:e7:25:5b:64:ba:0e:42:0c:72:0b:d6:c6:2a:9e:70:64:05:77:83:43:41:f4:d3:ae:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=AnWave Software and Simon Macer Project
Chains
Jun 26, 2026
CN=AnWave Software and Simon Macer Project
Subject
CN=AnWave Software and Simon Macer Project
Serial Number
18:57:a5:d1:db:6b:4a:9f:41:04:1f:47:e3:6c:8a:f3
Issuer
CN=AnWave Software and Simon Macer Project
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2025 - Jul 7, 2026
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\[D] Project Files\AnWave.Dev\RollbackDolby.project\RollbackDolby\obj\Release\RollbackDolby.pdb
Name
.text
Size
7.4MB
Virtual Size
7.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ