I finally figured out how to check the SHA-256 checksum of the zip file and actually it was different from the original hash. But I've downloaded this archive from the OP link, I'm 100% sure of that. I've removed the corrupted archive from my PC and re-downloaded the archive, checksum matched with the original one. Hope I don't have the trojan left on my PC