0757c8283e3c4fe69d73295cb904a2d6de5e1b89de6768f878398bd8c805dab0
- SHA256 0757c8283e3c4fe69d73295cb904a2d6de5e1b89de6768f878398bd8c805dab0
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sptsi_yo4o.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
sptsi_yo4o.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
19 signatures
150 seconds
General
- Target 0757c8283e3c4fe69d73295cb904a2d6de5e1b89de6768f878398bd8c805dab0
- Size 281KB
- Sample260717-tm7absfs2k
- SHA256 0757c8283e3c4fe69d73295cb904a2d6de5e1b89de6768f878398bd8c805dab0
- MD5 a0bfd20e705cb52c03cbbbaa01b9e770
- SHA1 932cd561fa3c7143b2fa2aa63ead05862306a277
- SHA512 7b3419fb86c6a850173d8ee055b7734ddb0ef6157027f1c1168f7380f857526d26d6e216b04d93080f679137d12ca21c0ae236e52a44dc0a3307684d3bd3c100
- SSDEEP 6144:xONehis6vA+BksQdEOpzEYiX9dr2Z4l73/+TKs5fXET+:2misn+Bk/dEEzEYE912CR+Wst
- TLSH T18C5423D93B79D526D40CF2CC8BEBF776DA115A9124ACE52BA3CBA09F00BC09021CDB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/sptsi_yo4o.exe
File Explorer
-
0757c8283e3c4fe69d73295cb904a2d6de5e1b89de6768f878398bd8c805dab0.zip 281KB
-
sptsi_yo4o.exe.exe 347KB
sptsi_yo4o.exe
- IMPHASH c89ff7990aba457ebaaf89ec77c1a99b
- SHA256 ec3c30c6447713970aaa9e9a244f3f85136225435dc16185b44704e8a516c138
- MD5 ddbeea61f2ab73bfd82b1d7cfe920ef3
- SHA1 f9063a3ba0daabf8ea8199734584c77953a625b1
- SHA512 17c214e779edfe9562c02c90d78b378fea7c805a6de9d99f9604ca42778f63e7c4531e5ccacb0de56f70240c9f3af92e3d47a2f0df6b2aa1ded7ba20d95aa17f
- SSDEEP 6144:tV0w3IOfqFS2mLNkMhGAu0PaNA65X5K/AwgdOn7bbfZ3dbQXHTi/lal:HIzA6MwA0Ac5I7qi73BAHtl
- TLSH T1D174F1075EF4380DDD130F7A98C99D6DE52AFA042AA2717E0B5FBE03462E4D099FA071
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
e1:fb:5e:1e:45:01:f4:7d:90:9a:cb:c2:c3:f9:24:89:a0:45:d4:17:5f:c2:0d:d2:e8:b3:d1:31:0e:dc:42:97
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91330110MA2B00R29G,CN=DingTalk Technology Co.\,Ltd.,O=DingTalk Technology Co.\,Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130f597568616e67204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Mar 13, 2025
SERIALNUMBER=91330110MA2B00R29G,CN=DingTalk Technology Co.\,Ltd.,O=DingTalk Technology Co.\,Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130f597568616e67204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91330110MA2B00R29G,CN=DingTalk Technology Co.\,Ltd.,O=DingTalk Technology Co.\,Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130f597568616e67204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=91330110MA2B00R29G,CN=DingTalk Technology Co.\,Ltd.,O=DingTalk Technology Co.\,Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130f597568616e67204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
09:40:11:e7:fa:9d:bd:6f:16:5f:41:37:79:72:a5:ae
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 2, 2024 - Jul 1, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
4336
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
HeapAlloc
HeapFree
GetProcessHeap
GetCommandLineW
LocalFree
lstrcmpW
lstrcmpiA
lstrcpynW
user32
wsprintfW
shell32
CommandLineToArgvW
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
360B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=33145,
count=10, id=1, productName=Unmarked objects,
count=1, id=259, version=35227,
count=2, id=260, version=35227,
count=1, id=258, version=35227,