Resubmissions

22/07/2025, 19:20

250722-x2jdlafm2x10

22/07/2025, 19:16

250722-xyssvsywdt7

General

  • Target
    WPS_Setup_x64.exe
  • Size 71.0MB
  • Sample250722-x2jdlafm2x
  • SHA256 8ec8f191124be5bc424cc9ea7f4ee9896791e0a9f0627c58a5cedf3bee18c389
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • WPS_Setup_x64.exe
    .exe 71.0MB
  • .rsrc/GROUP_ICON/103
    118B
  • .rsrc/ICON/1.ico
    66KB
  • .rsrc/ICON/2
    .png 37KB
  • .rsrc/ICON/3.ico
    37KB
  • .rsrc/ICON/4.ico
    16KB
  • .rsrc/ICON/5.ico
    9KB
  • .rsrc/ICON/6.ico
    4KB
  • .rsrc/ICON/7.ico
    2KB
  • .rsrc/ICON/8.ico
    1KB
  • .rsrc/MANIFEST/1
    .xml 1KB
  • .rsrc/version.txt
    1KB
  • CERTIFICATE
    10KB
  • UPX1
    27KB
  • [0]
    70.8MB
  • out.upx
    .exe 215KB

WPS_Setup_x64.exe

  • SHA256 8ec8f191124be5bc424cc9ea7f4ee9896791e0a9f0627c58a5cedf3bee18c389
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

PE Signature issue

Digest
a6:af:8d:4f:ad:23:90:67:57:c3:2f:61:b6:dc:85:fb:44:01:15:62:9b:54:42:51:83:7d:9e:ed:aa:42:72:91
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
5
Entry point
4106512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths