21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3

Sharing

Copy URL Twitter E-mail

General

Target
21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3
Size 8.4MB
Sample260706-ll2dpac13v
SHA256 21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3
MD5 107f97ac34997d515d23aa04443ff7b6
SHA1 91e59373ce744f567d0faad31dceb4b3386a5873
SHA512 429ffe0221b526c8145dfef63e6c044a152ca86f94095cde673d95f4d30ce6eb9b00571bfc6422b4c3782357a0bab7ec5815836841a8f8750dbbbb6e72a89aef
SSDEEP 196608:XZGTqrHTY9TLffzJkuKfE2MY5Syqc5lQd/YWqbrCiNtpkXaMdFi0iYJEi:pmqTTCTLfhK3MsSynMFYWCOiNMXi0ci
TLSH
T1789623F6D88C5858EA910EB87338EDD0A11A7A32CDB5A0AE5F0185B51C3A7F1C574D8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3

.exe 8.4MB

21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3

SHA256 21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3
MD5 107f97ac34997d515d23aa04443ff7b6
SHA1 91e59373ce744f567d0faad31dceb4b3386a5873
SHA512 429ffe0221b526c8145dfef63e6c044a152ca86f94095cde673d95f4d30ce6eb9b00571bfc6422b4c3782357a0bab7ec5815836841a8f8750dbbbb6e72a89aef
SSDEEP 196608:XZGTqrHTY9TLffzJkuKfE2MY5Syqc5lQd/YWqbrCiNtpkXaMdFi0iYJEi:pmqTTCTLfhK3MsSynMFYWCOiNMXi0ci
TLSH
T1789623F6D88C5858EA910EB87338EDD0A11A7A32CDB5A0AE5F0185B51C3A7F1C574D8F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

PE Signature issue

Digest

4e:fc:31:20:d8:b7:9f:63:65:29:a1:73:d9:8a:49:90:c1:c4:6f:77:f3:d8:7c:b4:62:0e:91:2e:a4:78:1c:51

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=9131012030160721XG,CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Mar 29, 2021

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

PE Signature issue

Digest

96:f9:3e:ef:75:66:7c:15:94:6d:37:be:e2:4e:bb:bc:15:65:6c:6c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=Shanghai,C=CN

Chains

Mar 29, 2021

CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=Shanghai,C=CN

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=Shanghai,C=CN

Serial Number

02:f3:64:30:33:f8:52:c4:a9:04:a4:be:7f:8d:c7:15

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 10, 2019 - Oct 14, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 4, 2014 - Mar 3, 2024

Subject

Serial Number

2e:eb:3d:c9:79:88:cd:f1:96:27:21:1a:39:f4:b1:ba

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 17, 2019 - Sep 18, 2021

Minor OS version

Major OS version

Entry point

15100816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

21b08036c9f914d00ae72bddb4ab9268f6411871e8a28b5be274ffa4ec99cfd3

PE Signature issue

PE Signature issue

generic