a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532.exe
Size 989KB
Sample260722-sy37dack2y
SHA256 a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532
MD5 dbcbd3d66765a89838836454aee4e406
SHA1 caf2122b8035e68df8ab0d61b03661661cd807a4
SHA512 83533ed3b30561b416101fcf312fc64a5bce6f015156c5278e9b5961524328e76381681e10a4e5ba77a1965551e4d323ccda8f0b908de7a9357bdd9304f6113f
SSDEEP 24576:FO0LWRegDmPzReD55m4k2sgC71BWQ3+UmqzQSHFfs:g0LOade95mKCr+UfMEFU
TLSH
T1912533AACA3C1504E2AF33B333DB7079E43A546D6345E264311BA59A4FD2981531FF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532.exe

.exe 989KB

a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532.exe

SHA256 a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532
MD5 dbcbd3d66765a89838836454aee4e406
SHA1 caf2122b8035e68df8ab0d61b03661661cd807a4
SHA512 83533ed3b30561b416101fcf312fc64a5bce6f015156c5278e9b5961524328e76381681e10a4e5ba77a1965551e4d323ccda8f0b908de7a9357bdd9304f6113f
SSDEEP 24576:FO0LWRegDmPzReD55m4k2sgC71BWQ3+UmqzQSHFfs:g0LOade95mKCr+UfMEFU
TLSH
T1912533AACA3C1504E2AF33B333DB7079E43A546D6345E264311BA59A4FD2981531FF2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

PE Signature issue

Digest

7a:5e:42:6a:bc:cc:86:2b:83:6f:38:33:67:84:00:71:c6:44:6e:6a:9d:8a:2f:7b:94:cd:f8:02:97:bb:a3:92

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=武汉网幂科技有限公司,O=武汉网幂科技有限公司,L=武汉,ST=湖北,C=CN

Chains

Sep 3, 2021

CN=武汉网幂科技有限公司,O=武汉网幂科技有限公司,L=武汉,ST=湖北,C=CN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=武汉网幂科技有限公司,O=武汉网幂科技有限公司,L=武汉,ST=湖北,C=CN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=武汉网幂科技有限公司,O=武汉网幂科技有限公司,L=武汉,ST=湖北,C=CN

Serial Number

36:dc:4c:0f:76:a8:6e:a2:9f:52:ab:ee

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 7, 2021 - Jul 19, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

377248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532.exe

PE Signature issue

generic