Tax Notice[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Tax Notice.exe
Size 25.3MB
Sample260807-vxgcbshr4x
SHA256 749c688bc6049b650c31c956c86b269844ebb3e55939f8b99bf8f90a59cc4218
MD5 b4244b9f2684275fab4192b04f378b62
SHA1 6ae839ed1dbc48d54b5c03f5634e8cf91480b3a1
SHA512 4dfb2045aaee7ce1be1d59b23a18063fa491936ece23a4aa55fb67be08c8096d25fb82f121fb936336bafa0f06307044eefb7acf7a5afee7a1bcf915e14e760b
SSDEEP 786432:KOAoS1wzATG+rjPYwVB5i/OotaLWy01c80lawntf6:nAoS6AqaJVG/OogLScJlj6
TLSH
T10F4733629DF97815CEF11D339AEF674AE1E6B840EC7864D15EC27C62933ECE4082A435
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Tax Notice.exe

.exe 25.3MB

Tax Notice.exe

IMPHASH 09d0478591d4f788cb3e5ea416c25237
SHA256 749c688bc6049b650c31c956c86b269844ebb3e55939f8b99bf8f90a59cc4218
MD5 b4244b9f2684275fab4192b04f378b62
SHA1 6ae839ed1dbc48d54b5c03f5634e8cf91480b3a1
SHA512 4dfb2045aaee7ce1be1d59b23a18063fa491936ece23a4aa55fb67be08c8096d25fb82f121fb936336bafa0f06307044eefb7acf7a5afee7a1bcf915e14e760b
SSDEEP 786432:KOAoS1wzATG+rjPYwVB5i/OotaLWy01c80lawntf6:nAoS6AqaJVG/OogLScJlj6
TLSH
T10F4733629DF97815CEF11D339AEF674AE1E6B840EC7864D15EC27C62933ECE4082A435
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

22:a4:af:f5:5d:f1:90:a4:81:e9:3d:23:3d:a9:21:b2:4a:5d:08:71:39:ce:4c:b5:50:4b:ec:f1:dc:56:82:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN

Chains

Aug 4, 2026

CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Digest

c0:f4:1e:a1:43:a9:fe:24:9f:96:e0:22:13:6f:5a:79:ab:84:97:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN

Chains

Aug 4, 2026

CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN

Serial Number

66:6b:91:4a:0e:24:db:e5:77:5b:9a:69:a3:fb:7c:fb

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 23, 2026 - Mar 23, 2027

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

6912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Tax Notice.exe

kernel32

generic