General

  • Target
    UCWin_V1.1.0.21_window_pf5003_(Build202604231839).exe
  • Size 212.8MB
  • Sample260517-3fbphsdw4s
  • SHA256 ef551c3a0bb31c72a797e9d7acc1a01568a9d09cf9f07728fb82ed54fe7f3fe5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • UCWin_V1.1.0.21_window_pf5003_(Build202604231839).exe
    .exe 212.8MB

UCWin_V1.1.0.21_window_pf5003_(Build202604231839).exe

  • IMPHASH 5a594319a0d69dbc452e748bcf05892e
  • SHA256 ef551c3a0bb31c72a797e9d7acc1a01568a9d09cf9f07728fb82ed54fe7f3fe5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

Digest
b5:fa:0e:48:0f:01:5d:08:89:f2:a7:b0:90:c0:53:5b:b4:73:43:77:8a:78:53:5b:1e:3d:b2:28:b1:05:02:2a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91330100716105852F,CN=ALIBABA (CHINA) NETWORK TECHNOLOGY CO.\,LTD.,O=ALIBABA (CHINA) NETWORK TECHNOLOGY CO.\,LTD.,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c21e69dade5b79ee9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
745196
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths