Overview

overview

8

Static

static

8

Packet_Tra...ed.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Packet_Tracer822_64bit_setup_signed.exe
  • Size 227.9MB
  • Sample261014-jrvf8a1why
  • SHA256 1aa1094bfa611c955c2e2885aea3bc8685211c95b55de017242fd0d38eb7cab1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesigninstaller

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer

File Explorer

  • Packet_Tracer822_64bit_setup_signed.exe
    .exe 227.9MB

Packet_Tracer822_64bit_setup_signed.exe

  • IMPHASH e569e6f445d32ba23766ad67d1e3787f
  • SHA256 1aa1094bfa611c955c2e2885aea3bc8685211c95b55de017242fd0d38eb7cab1
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx86arch:x86

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

    installer
Password
cisco

PE Signature issue

Digest
9f:11:c1:7e:a8:dc:41:09:24:40:55:ac:ad:6e:78:88:0b:50:84:67:27:91:22:5e:49:15:b0:62:9c:26:19:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=C4682478,CN=Cisco Systems Inc.,OU=Cisco Systems Inc.,O=Cisco Systems Inc.,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
6
Entry point
745196
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths