Resubmissions

23/06/2026, 06:43

260623-hg6wtsbs517

23/06/2026, 04:46

260623-fedfdsat2j7

23/06/2026, 04:27

260623-e3c9vsaw5x7

23/06/2026, 02:53

260623-ddqm8aat617

23/06/2026, 02:20

260623-csmz7sat2s7

General

  • Target
    UltraViewer_setup_6.6.124_en.exe
  • Size 3.5MB
  • Sample260623-e3c9vsaw5x
  • SHA256 020aac79a14717e316a593155ca778dd3e253b888bf62633b174838d35df7f41
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • UltraViewer_setup_6.6.124_en.exe
    .exe 3.5MB

UltraViewer_setup_6.6.124_en.exe

  • IMPHASH 20dd26497880c05caed9305b3c8b9109
  • SHA256 020aac79a14717e316a593155ca778dd3e253b888bf62633b174838d35df7f41
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

PE Signature issue

Digest
97:a2:fc:90:c1:e3:83:b0:06:c0:18:06:23:b6:b2:60:ea:a1:e0:30:92:9b:79:26:04:2d:ae:1b:34:f1:09:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=0105838409,CN=DUC FABULOUS CO.\,LTD,O=DUC FABULOUS CO.\,LTD,L=Hanoi,C=VN,1.3.6.1.4.1.311.60.2.1.3=#1302564e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
5
Entry point
71644
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths