» dc_ZTE_routers.exe
Overview
Analysis
File Details
Downloads (2)

dc_ZTE_routers.exe

DC-Unlocker ZTE routers unlocker client

UAB ”DIGITEKA”

This is a setup program which is used to install the application. The file has been seen being downloaded from files.dc-unlocker.com and multiple other hosts.

File name:

dc_ZTE_routers.exe

Publisher:

UAB Digiteka (signed by UAB ”DIGITEKA”)

Product:

DC-Unlocker ZTE routers unlocker client

Description:

Unlock solution for ZTE routers via network adapter

Version:

1.0.0.6

MD5:

503aef9f7d0d4748d6e995bd27a77dbf

SHA-1:

91be57cbb2fd73a54831ffa484450eb4a836b5a2

SHA-256:

5ca648c0aeebd8102002b4b0ddecd1bc786203785419ba16282d2f8ed2cf7463

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/25/2024 4:30:49 PM UTC (today)

File size:

3.2 MB (3,310,736 bytes)

Product version:

1.00.0006

Original file name:

dc_ZTE_routers.exe

File type:

Executable application (Win32 EXE)

Language:

Lituano (Lituania)

Common path:

C:\users\{user}\downloads\dc_zte_routers.exe

Digital Signature

Signed by:

UAB ”DIGITEKA”

Authority:

StartCom Ltd.

Valid from:

1/2/2013 6:51:01 AM

Valid to:

1/3/2016 4:41:22 PM

Subject:

E=manager@digiteka.lt, CN=UAB ”DIGITEKA”, O=UAB ”DIGITEKA”, L=Panevėžys, S=Panevezio Apskritis, C=LT, Description=BQlAnZSt091y56bp

Issuer:

CN=StartCom Class 3 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

085A

File PE Metadata

Compilation timestamp:

6/19/1992 7:22:17 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:3nl+7JdNIrnHjjeyXEG87KZuhEtuK33Bw1nuuRdN4qRrF3iLpZTp3MlKFOCNLBCO:Xl+7rK/j6YZuS2HNlv3uHt3MyPCA

Entry address:

0x40DBFF

Entry point:

E9, 03, 48, 00, 00, CF, 69, 79, 8A, 6C, 5A, 68, 15, E9, 77, CF, FF, 67, 6F, 3E, 1A, 78, 12, 18, 82, 75, 83, 66, EA, B9, 7F, EB, 0B, 5F, 8F, 12, F6, 8D, 73, 43, B2, 72, 90, EF, 18, 27, 09, 5F, D1, 45, 55, 71, 9C, 2E, 7D, 0C, AB, EF, F1, 37, DE, 22, 8C, 28, 21, AB, 06, 2A, C6, 7C, 78, 33, 06, 00, FD, 5B, 27, 04, 03, 02, 20, E8, 12, 54, 43, F9, 2F, D5, FB, B4, B1, 07, C9, 00, 68, 9A, 44, AA, 4E, 03, 7E, 90, 9A, 53, 15, 61, 5D, 45, 34, 3C, A8, D2, FA, 8C, 70, F2, EE, A8, 1A, 11, 87, 57, 95, E5, CD, 20, 54, C0... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.7 MB (1,748,992 bytes)

The file dc_ZTE_routers.exe has been seen being distributed by the following 2 URLs.

https://files.dc-unlocker.com/backend/r.php/.../53a3fd20b3689

https://files.dc-unlocker.com/backend/r.php/.../6CFD453D9873402FA2E1EF9293E98F8A

Scan dc_ZTE_routers.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.