Overview

overview

5

Static

static

5

9d27f33fce...b9.exe

windows10-2004-x64

5

9d27f33fce...b9.exe

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    9d27f33fce706ac48a4dd34c47a5ec51d3c1de7378b1a75db0c1ec9e128133b9
  • Size 852KB
  • Sample260810-ltejwseq9t
  • SHA256 9d27f33fce706ac48a4dd34c47a5ec51d3c1de7378b1a75db0c1ec9e128133b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 9d27f33fce706ac48a4dd34c47a5ec51d3c1de7378b1a75db0c1ec9e128133b9
    .exe 852KB
  • out.upx
    .exe 1.5MB

9d27f33fce706ac48a4dd34c47a5ec51d3c1de7378b1a75db0c1ec9e128133b9

  • SHA256 9d27f33fce706ac48a4dd34c47a5ec51d3c1de7378b1a75db0c1ec9e128133b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Codesign digest Mismatch

    File was altered after it was signed.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

PE Signature issue

Digest
1e:e7:cb:26:1a:9d:36:98:5b:9e:8a:34:74:24:3c:8d:42:1c:24:bc:60:23:b0:ad:9f:34:c0:77:db:d5:64:99
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN
Minor OS version
1
Major OS version
5
Entry point
1918696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths