General

  • Target
    qqãƒâƒã‚â¥ãƒâ‚ã‚â½ãƒâ‚ã‚â±ãƒâƒã‚â©ãƒâ‚ã‚âŸãƒâ‚ã‚â³_12_10031582.exe
  • Size 20.3MB
  • Sample260809-gylrjsam8x
  • SHA256 69fbc9932e2fb5e503c3dc0d9af1595a40431d753b07ca1233c1b1ee229c28f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • qqãƒâƒã‚â¥ãƒâ‚ã‚â½ãƒâ‚ã‚â±ãƒâƒã‚â©ãƒâ‚ã‚âŸãƒâ‚ã‚â³_12_10031582.exe
    .exe 20.3MB

qqãƒâƒã‚â¥ãƒâ‚ã‚â½ãƒâ‚ã‚â±ãƒâƒã‚â©ãƒâ‚ã‚âŸãƒâ‚ã‚â³_12_10031582.exe

  • IMPHASH 489bd839bd86aa9ee41094c6f8c906ed
  • SHA256 69fbc9932e2fb5e503c3dc0d9af1595a40431d753b07ca1233c1b1ee229c28f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
bf:3a:26:c9:93:6c:60:b4:2e:03:d3:af:1b:d5:6e:b6:dd:7a:1f:c3:50:03:b8:e6:8a:a7:a7:35:79:ee:a8:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91450500MAA7H9NJ04,CN=Guangxi Yunao Network Technology Co. Ltd.,O=Guangxi Yunao Network Technology Co. Ltd.,L=Beihai,ST=Guangxi Zhuang Autonomous Region,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#131642656968616920496e647573747269616c205061726b,1.3.6.1.4.1.311.60.2.1.2=#13074775616e677869,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
1
Major OS version
5
Entry point
1846644
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\UIDownloader\bin\Release\setup_1_237148.pdb