5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610

Sharing

Copy URL Twitter E-mail

General

Target
5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610
Size 5.3MB
Sample241019-shs2gathml
SHA256 5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610
MD5 00c2652d73caaff1d6cc548db460a338
SHA1 28f8055bfd278e30e8792087e39091c5913dcbbc
SHA512 1b949845e19313251d378804fe362dc026c637f16101d2e8a362bf4afcc2f2a8e225dc7114728305661a4133c5882b5735d186a28e2ae6ee970677cbbaea5383
SSDEEP 98304:Z6NxvG/Qx89r2kTo35Km+sjaK1yKtaWNkeNtsfGOPcEuGbpYok63Ij7X2bVWoyNX:UNM/lUk035mnK1yKta8k0YDuGb9N3MXl
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610

.exe 5.3MB

5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610

SHA256 5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610
MD5 00c2652d73caaff1d6cc548db460a338
SHA1 28f8055bfd278e30e8792087e39091c5913dcbbc
SHA512 1b949845e19313251d378804fe362dc026c637f16101d2e8a362bf4afcc2f2a8e225dc7114728305661a4133c5882b5735d186a28e2ae6ee970677cbbaea5383
SSDEEP 98304:Z6NxvG/Qx89r2kTo35Km+sjaK1yKtaWNkeNtsfGOPcEuGbpYok63Ij7X2bVWoyNX:UNM/lUk035mnK1yKta8k0YDuGb9N3MXl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

PE Signature issue

Digest

a2:19:c2:7a:da:ee:c9:5f:13:2c:fc:a8:c8:0a:f7:45:e2:12:f6:23:19:7a:ea:d6:6c:fc:05:a4:1d:f3:83:4e

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=91411403MA44M61HX4,CN=商丘爱宇网络科技有限公司,O=商丘爱宇网络科技有限公司,ST=河南省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Mar 21, 2024

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 1, 2004 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

Serial Number

8b:b3:df:56:a2:7a:35:69:21:ad:a8:ad:c3:a7:04:11

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 12, 2024 - Mar 12, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

7672704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

5acee0627b19112b38270bcc66fd21ca0fd419d83f027192403002ad67c28610

PE Signature issue

generic