4a6e8b6b8530d10f9ec8d5f78d51d6b8

General

Target
4a6e8b6b8530d10f9ec8d5f78d51d6b8
Size 1.2MB
Sample240108-e1sxjababq
SHA256 39abf612a2e3b328a0f2912c51807dcfc9ee2077e037b03d277e709dca0fc959
MD5 4a6e8b6b8530d10f9ec8d5f78d51d6b8
SHA1 6c41896c75656af0ace63fedb6468b666a942679
SHA512 ea049d2e516de6730630a88d980468b1c6e22fe323cb641b654dd6f5b616c86d5e80f6c3ff9955608f8ca56ecb5f34592c9cfd379ea864f2a156986633f452d6
SSDEEP 24576:PagfE+/XN/OB/76pE7Gi+sc9GnoJOQDpWnoypgB+3E1zVaR3+GoltYefYYugxl:/fx9k/7SE7Gia8noMQD0oypgYF33oltR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

4a6e8b6b8530d10f9ec8d5f78d51d6b8

.exe 1.2MB

4a6e8b6b8530d10f9ec8d5f78d51d6b8

SHA256 39abf612a2e3b328a0f2912c51807dcfc9ee2077e037b03d277e709dca0fc959
MD5 4a6e8b6b8530d10f9ec8d5f78d51d6b8
SHA1 6c41896c75656af0ace63fedb6468b666a942679
SHA512 ea049d2e516de6730630a88d980468b1c6e22fe323cb641b654dd6f5b616c86d5e80f6c3ff9955608f8ca56ecb5f34592c9cfd379ea864f2a156986633f452d6
SSDEEP 24576:PagfE+/XN/OB/76pE7Gi+sc9GnoJOQDpWnoypgB+3E1zVaR3+GoltYefYYugxl:/fx9k/7SE7Gia8noMQD0oypgYF33oltR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

PE Signature issue

Digest

4a:7e:60:62:39:cf:9a:96:6a:ea:93:ce:9c:dc:40:72:a2:ba:c3:88

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=DNAML PTY LTD,OU=Secure Application Development,O=DNAML PTY LTD,L=Sydney,ST=NSW,C=AU

Chains

Jan 4, 2024

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Serial Number

01

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Timespan

Aug 1, 1996 - Dec 31, 2020

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Serial Number

0a

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Aug 6, 2003 - Aug 5, 2013

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=DNAML PTY LTD,OU=Secure Application Development,O=DNAML PTY LTD,L=Sydney,ST=NSW,C=AU

Serial Number

3e:ae:0f

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 11, 2004 - Oct 8, 2005

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Minor OS version

0

Major OS version

4

Entry point

3927568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

4a6e8b6b8530d10f9ec8d5f78d51d6b8

PE Signature issue

generic