06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471

General

Target
06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471
Size 6.6MB
Sample260722-mmndwsgn21
SHA256 06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471
MD5 9aae51063fbc51b64188f705015513ef
SHA1 0da16300fc04bfd6122d0e42675986b7d7090f89
SHA512 1cd85b5569af26d62bc9ee38df0a3bb8c6f1f092c6861090be7d49f59d79b11384c93fd59a9ce0fa80f7b65790bf71ae8094b4c48ecb20ec39a830890c73f8f5
SSDEEP 98304:1qGD0xVJuM3+VilzcHR21nMO+CFSkW8nktKMqIFfKukiAxI5zKLZLyQhMQ8cu:1qBWx6PSAnklgK5zKdLyQOEu
TLSH
T1096633995C3146B3E7B9EAB9DF2AB9739E31A821D5C931313B52DBD304B2AD01758203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471

File Explorer

06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471

.exe 6.6MB

06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471

SHA256 06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471
MD5 9aae51063fbc51b64188f705015513ef
SHA1 0da16300fc04bfd6122d0e42675986b7d7090f89
SHA512 1cd85b5569af26d62bc9ee38df0a3bb8c6f1f092c6861090be7d49f59d79b11384c93fd59a9ce0fa80f7b65790bf71ae8094b4c48ecb20ec39a830890c73f8f5
SSDEEP 98304:1qGD0xVJuM3+VilzcHR21nMO+CFSkW8nktKMqIFfKukiAxI5zKLZLyQhMQ8cu:1qBWx6PSAnklgK5zKdLyQOEu
TLSH
T1096633995C3146B3E7B9EAB9DF2AB9739E31A821D5C931313B52DBD304B2AD01758203
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

82:41:ba:84:10:ce:76:eb:07:49:29:f9:26:1f:0d:ae:cb:aa:55:2d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=深圳市鸿巨昌科技有限公司

Chains

Apr 7, 2025

CN=深圳市鸿巨昌科技有限公司

Subject

CN=深圳市鸿巨昌科技有限公司

Serial Number

15:19:8b:f8:04:16:a6:98:44:7e:11:56:2e:d1:07:7d

Issuer

CN=深圳市鸿巨昌科技有限公司

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 25, 2022 - Dec 31, 2039

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

1

Major OS version

5

Entry point

14191504

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

06c9b1526af192a5d161dedd65c4a3cde17b4c61b167fe4f4771ae7192fff471

PE Signature issue

generic