v9.14.745.rar
- SHA256 20b1f0c01b0dc09de47b7110054e2593779bb4f56ae101f711bfedefb11acc50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v9.14.745.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
v9.14.745.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
NexomiaUI_v9.14.745.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
NexomiaUI_v9.14.745.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target v9.14.745.rar
- Size 1.3MB
- Sample260812-3sh95afd39
- SHA256 20b1f0c01b0dc09de47b7110054e2593779bb4f56ae101f711bfedefb11acc50
- MD5 64441721dda7c5130d530ff4070835fa
- SHA1 2da2cd6550409108f935cd9f8728f38f0e0b0840
- SHA512 e31ef3baff6fa2c500485768db243e4ea17759ed98cb85bf68fe05ef42b69c46bd72bac2d638c04d8ff850d2df491fa77f87db5888e6f639eb484883b58fc0cf
- SSDEEP 24576:8ms2Fg3QUbn7PMPxMBj9S4/fYEjKNh6f0x0Kex5V12QQ8KL+4qZr+VqfsB:8mbFdUb7UPxMjS4HYEefAhH2iaP3qg
- TLSH T1165533CD5D3C0168A293B966CE62257C476722E15D87CBE75A831C92CA943CE3F3129F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/NexomiaUI_v9.14.745.exe
File Explorer
-
v9.14.745.rar.rar 1.3MB
-
NexomiaUI_v9.14.745.exe.exe 3.4MB
NexomiaUI_v9.14.745.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 9d417c1fb629777f4be09fa4419ab5a24e3c0d97068ebdaa7fcf326ed5823955
- MD5 5b3696fd3756cc1341b7f8fbb2713c27
- SHA1 1ad3220666f93094d5fb5a71c1b436b4692922c5
- SHA512 7a6b07d6e8e71b8723fa21a0ae028b1a5ae54f16d0f2ece56f43187ee8a546f5a692b49e34446e66e3921a81223eb6b8139cbbeba1b5c2ae16c50bff6877954f
- SSDEEP 49152:saESzmxDrOglAY1Dbpd5VTwIXAgOP+Ir+d56xOhRndFKAhWM4:sanTOwr9vr+/6xOhRdgki
- TLSH T1A2F59E07ACE14AF6C0AAA33189B355217B71BC484B3627E72E90B7782F727D06D79714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
1e:ce:9c:3a:d4:bc:61:b6:60:d9:6e:bc:b0:6a:81:9d:c5:d8:07:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=dadada.dododo,O=FD8uzmGGQSrD,L=WPicx,ST=WYnanHW,C=US
Chains
Aug 6, 2026
CN=dadada.dododo,O=FD8uzmGGQSrD,L=WPicx,ST=WYnanHW,C=US
Subject
CN=dadada.dododo,O=FD8uzmGGQSrD,L=WPicx,ST=WYnanHW,C=US
Serial Number
15:89:23:ee:75:2b:ee:1a
Issuer
CN=dadada.dododo,O=FD8uzmGGQSrD,L=WPicx,ST=WYnanHW,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 12, 2026 - Aug 12, 2027
Minor OS version
1
Major OS version
6
Entry point
477088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
71KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ