4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

General

Target
4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
Size 314KB
Sample260804-ylcfsawzhx
SHA256 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
MD5 6234660228e57745898d2942b845fa45
SHA1 e27025befa7310d276e389477135b1186cbc3aab
SHA512 6dd4d43b69eff38a60b4ddf2927e712cb02f3d09e9aa5b9f1b9c398ae7c33a9f87847f37b5c563e93d8f81d2ff4b4e59743c627e49c67b64ef2617063d8a6653
SSDEEP 6144:b1xO4J48tQi41t5O+IJZVMszVaCqZoRi35v44qmJXDKPdxtJ2y1/J86rF:bTO/8tQt75U7VMaUoRixJOZJT/J/rF
TLSH
T18E6423AA29DEF552F6C88D748944ABC27C729C410F430BEA15DC50BB2DB90977A1E31F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

File Explorer

4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

.dll 314KB
out.upx

.dll 1.0MB

4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

SHA256 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
MD5 6234660228e57745898d2942b845fa45
SHA1 e27025befa7310d276e389477135b1186cbc3aab
SHA512 6dd4d43b69eff38a60b4ddf2927e712cb02f3d09e9aa5b9f1b9c398ae7c33a9f87847f37b5c563e93d8f81d2ff4b4e59743c627e49c67b64ef2617063d8a6653
SSDEEP 6144:b1xO4J48tQi41t5O+IJZVMszVaCqZoRi35v44qmJXDKPdxtJ2y1/J86rF:bTO/8tQt75U7VMaUoRixJOZJT/J/rF
TLSH
T18E6423AA29DEF552F6C88D748944ABC27C729C410F430BEA15DC50BB2DB90977A1E31F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

49:56:15:c1:85:23:7e:2b:e1:86:c7:75:b1:43:23:30:4a:44:45:dd:8b:a2:34:00:00:8e:e8:2d:82:48:e8:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=FutureNexus Labs Co.\, Ltd.,1.2.840.113549.1.9.1=#1300

Chains

Jul 6, 2026

CN=FutureNexus Labs Co.\, Ltd.,1.2.840.113549.1.9.1=#1300

Subject

CN=FutureNexus Labs Co.\, Ltd.,1.2.840.113549.1.9.1=#1300

Serial Number

09:b0:93:e6:76:39:da:a4:4d:87:85:a5:63:68:31:d6

Issuer

CN=FutureNexus Labs Co.\, Ltd.,1.2.840.113549.1.9.1=#1300

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 31, 2002 - Dec 30, 2099

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Subject

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Serial Number

90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Mar 24, 2041

Subject

CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB

Serial Number

e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15

Issuer

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Jun 24, 2037

Minor OS version

0

Major OS version

6

Entry point

1095840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 c78f2bb3b4f633e6c771396242da858c5453a7a57b669dc4966bf63db6fbacfb
MD5 7239562571ec039a85366ed8556935d0
SHA1 974002a93baf604acb76a2b1e6c38dfa9fdf3f7c
SHA512 79ed2866781846ee2be79fad6faa378e39949c23b019dc740240dda56b754ecef10031572236bd9012686f3b59ef0e637a59f0ce1f2f77f0c6f91aab21b1d9ab
SSDEEP 12288:XV3n0Svs1Mz/2wtYkkfcCm8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+SN+9:XJ0SU1MzykDS+9
TLSH
T196258324B9BA8139D037FFB83EDCF89EDCAB3A151545646B0152034B8A22AD0DF5B53D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

156296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

317KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

680KB

Virtual Size

679KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

PE Signature issue

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014

PE Signature issue

generic

out.upx

generic