» dc_zte_icera_unlocker.exe
Overview
Analysis
File Details
Downloads (4)

dc_zte_icera_unlocker.exe

UAB ”DIGITEKA”

This is a setup program which is used to install the application. The file has been seen being downloaded from files.dc-unlocker.com and multiple other hosts.

File name:

Publisher:

UAB Digiteka (signed by UAB ”DIGITEKA”)

Description:

Unlock solution for ZTE modems with Icera chipset

Version:

1.0.0.26

MD5:

2ff698a368fc59b1ba7d416367e59c6f

SHA-1:

683482008d26845d63cc1e3721e5405eed49d814

SHA-256:

49d31a6a78d39f58216754f7d30aa40beb4f090ab7ed234a2c4d56188c0bc874

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/29/2024 3:03:09 AM UTC (today)

File size:

3 MB (3,117,712 bytes)

Product version:

1.00.0026

File type:

Executable application (Win32 EXE)

Language:

Lithuanian (Lithuania)

Common path:

C:\users\{user}\downloads\dc_zte_icera_unlocker.exe

Digital Signature

Signed by:

UAB ”DIGITEKA”

Authority:

StartCom Ltd.

Valid from:

1/2/2013 11:51:01 AM

Valid to:

1/3/2016 9:41:22 PM

Subject:

E=manager@digiteka.lt, CN=UAB ”DIGITEKA”, O=UAB ”DIGITEKA”, L=Panevėžys, S=Panevezio Apskritis, C=LT, Description=BQlAnZSt091y56bp

Issuer:

CN=StartCom Class 3 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

085A

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:4V/4vacTdVxhn0EB4V+4tDc2NYeAmauWoMTMFtciUH2OuXbxHPnmq4ri31:4V/4ac3n0k+T9NhdaRgeiUWOsHPmxril

Entry address:

0x67E1EB

Entry point:

9C, C7, 04, 24, 1F, 01, 0F, 45, E8, 79, 66, 01, 00, 66, 85, F1, 9C, 09, DB, E9, 10, 0B, 01, 00, E4, 0C, 73, F7, CF, 0E, 46, A6, AD, 4E, BD, BD, 94, 5D, BD, 3B, C1, B2, 3B, 37, B1, CA, 8C, 66, 78, FF, 02, 73, C5, 2E, B5, C3, 84, 72, B1, 15, 8B, CB, F8, 27, 60, 9B, 22, D8, 2E, 1F, 55, 82, 16, 37, CD, 34, A9, 7C, 79, B5, 41, 5C, DA, 1B, 76, 7F, 67, 80, BF, 8A, 11, 5E, 71, 28, 0D, 7B, 22, 09, 4D, 34, BF, 84, 04, 9A, 7F, CA, 93, A2, 80, A3, 6B, 7B, 0D, 22, 0A, 67, 18, 10, D6, A3, 04, D9, A2, A3, CC, 56, B0, 33... 
[+]

Code size:

1.6 MB (1,630,720 bytes)

The file dc_zte_icera_unlocker.exe has been seen being distributed by the following 4 URLs.

https://files.dc-unlocker.com/backend/r.php/.../BEB85648500940BAB2E3BA4C73247022?_=1473338249842

https://files.dc-unlocker.com/backend/r.php/.../BEB85648500940BAB2E3BA4C73247022?_=1464448581167

https://files.dc-unlocker.com/backend/r.php/.../BEB85648500940BAB2E3BA4C73247022?_=1454414587027

https://files.dc-unlocker.com/backend/r.php/.../BEB85648500940BAB2E3BA4C73247022

Scan dc_zte_icera_unlocker.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.