validrive-1.0.1.zip
- SHA256 5d1e9c2d47a5103d9d6f916832eac3cbd9f3f470fdb1cbf626d88db8cdd79f07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
validrive-1.0.1.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
12 signatures
60 seconds
General
- Target validrive-1.0.1.zip
- Size 64KB
- Sample261107-v61sbsfe35
- SHA256 5d1e9c2d47a5103d9d6f916832eac3cbd9f3f470fdb1cbf626d88db8cdd79f07
- MD5 c8c09015271232195b608fc0a8cc2d9e
- SHA1 e0e8df0c6456839e789165deddb247e6b99f9e8d
- SHA512 dd4a18b572502bdb9df291aabc0f886959476b86876bc9d307ef41f4cd866c430b195e64c4c386bef2b02ad3c1ac160053cb10c6ee7d2ec84f4608aab16ca196
- SSDEEP 1536:ZVCZudHaeYYby9xSwrv5SF48I+d2KlMySUkNl:ZAudHaPv5vH+dE9l
- TLSH T13A53022967FB3859C730E12C563A60D73B2432604BB81B36566BC7344AF5EAE63354CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/validrive-1.0.1.exe
File Explorer
-
validrive-1.0.1.zip.zip 64KB
-
validrive-1.0.1.exe.exe 104KB
validrive-1.0.1.exe
- IMPHASH 09d0478591d4f788cb3e5ea416c25237
- SHA256 382041665c4670222b8b2600df1e3f4ec97d2b24b071d0f94e503e53b0ad19a4
- MD5 1fa9affcc560b68c96e8f4e44d91385e
- SHA1 564365650bc4603f6c5817f0ade8aa1ec7a7ca47
- SHA512 b05388ec78f00abbbb40fcc5ef6d4a834c4f5734e75c4e8ce365e015b50726d802bd30364436ada2075a40506382518c9e3c7bc0deb6f95a82e8672fd9de1b1d
- SSDEEP 1536:AKCzL2t02rIKa8I+YyUaZW6HaMLwnZQtBznPIB06ogEM4nb794xE7Oxi:VCH2t08IeUStaLCBwobM4nBj
- TLSH T1CAA3BF92FB48EC01C8660A34E8D4DDF95932BC851FA486D332ACFE5F7F51742AC462A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
9f:f7:cd:0b:e9:72:b2:b5:2f:cf:e2:7b:bc:ba:68:48:01:79:fb:31:d3:3e:9d:55:a8:96:99:27:5e:b6:b5:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=1411812,CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jan 1, 0001
PE Signature issue
Digest
f0:ed:22:f4:05:a5:26:05:1e:a8:56:a5:e1:51:80:d2:48:23:7e:af
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jan 1, 0001
Subject
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Issuer
CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Revoked
Revocation Date
May 15, 2026
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:de:e9:61:e8:dc:e9:eb:bd:3e:52:f8:dc:07:fc:37
Issuer
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2022 - Apr 23, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
SERIALNUMBER=1411812,CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
07:1f:bd:c2:6b:f5:a6:97:e7:04:b8:5b:9f:bb:81:be
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 17, 2024 - Nov 20, 2026
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Minor OS version
0
Major OS version
5
Entry point
13871
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Name
.text
Size
27KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=25, id=123, productName=VS2005 build 50727, version=50727,
count=174, id=1, productName=Unmarked objects,
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,