v1.15.436.rar
- SHA256 c6890dd07ed6ae20ed0fad45e7be910a95725b3c6d639e974b751060504dfc2d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexomiaUI_v1.15.436.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NexomiaUI_v1.15.436.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target v1.15.436.rar
- Size 1.3MB
- Sample260813-c8jbysgc99
- SHA256 c6890dd07ed6ae20ed0fad45e7be910a95725b3c6d639e974b751060504dfc2d
- MD5 d7cab256ef19a375ad3f3ec274b0147c
- SHA1 e08a5ad091dc71a2bb39c76f2c0f75a27dff35bd
- SHA512 306dc09b7e00d45d8b00e387b3c329814acf121d31857ee079e9b353dc0cebc26c4ddaeaba1352677f63d58b821bd7b4d79a70a659781069de89a26ff3db0bcd
- SSDEEP 24576:8jllQCxcmQCFEkPkQ688K8cCMJVZIic07K9mseqm24wicIRL4YoXUykH:8jllxxcmSkPg8Dh1t1c0uBeqm24/cvYT
- TLSH T130553359993A42671BBC3231B9E07A1586F18F44C7BA03C50F3936E3691C574AECB6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/NexomiaUI_v1.15.436.exe
File Explorer
-
v1.15.436.rar.rar 1.3MB
-
NexomiaUI_v1.15.436.exe.exe 53.4MB
NexomiaUI_v1.15.436.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 5eead14d7bb983eb7654d0761a60323432600b99e17b5e34db4544da87b7cbde
- MD5 aef5fca08e1f8971eca93794b988cfb5
- SHA1 a53d846d0ed673a6d8be895ed2df1f22c8125ebf
- SHA512 6049b36e89e786210926ed61805137d8acd6b1d6289ae63a529e4084cfb8f8b30c9e23c4e68e2393731e2f977f5cbbb01f1052c4325fb5e04f53edf4134ff7f3
- SSDEEP 49152:d1kGB/4eHCsdeAnzOtccsPLHOff0fT76AtCoY47L9I7x7X9AWhS:d17l/ODH0fT76AooNX9u2p
- TLSH T1A7C7AE07ACA149F6D09AA73289B351617B70BC481F3627E72E80B7782F367C05E7A715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f7:a8:e2:cb:59:97:c8:2a:51:24:8d:b1:0f:0f:1d:36:51:7a:9a:05
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=dadada.dododo,O=kzjzI9q98HA4,L=LYHUzTZ5t,ST=D5pU0U,C=US
Chains
Aug 6, 2026
CN=dadada.dododo,O=kzjzI9q98HA4,L=LYHUzTZ5t,ST=D5pU0U,C=US
Subject
CN=dadada.dododo,O=kzjzI9q98HA4,L=LYHUzTZ5t,ST=D5pU0U,C=US
Serial Number
68:2c:65:2a:f7:ac:ad:4e
Issuer
CN=dadada.dododo,O=kzjzI9q98HA4,L=LYHUzTZ5t,ST=D5pU0U,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 12, 2026 - Aug 12, 2027
Minor OS version
1
Major OS version
6
Entry point
477088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
71KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ