v7.28.427.zip
- SHA256 e86ef1c996fa624d2257db8df9d1cc5f57e695d6b0a856ac3d943e7e24d59c4f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NexomiaUI_v7.28.427.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NexomiaUI_v7.28.427.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target v7.28.427.zip
- Size 1.8MB
- Sample260813-pene2aaf79
- SHA256 e86ef1c996fa624d2257db8df9d1cc5f57e695d6b0a856ac3d943e7e24d59c4f
- MD5 b942661ace36df64e472cad552eff480
- SHA1 5416207d1bbdb7808f8dcd7581c252d08a1c0c76
- SHA512 053f54e1c48f760496e226fa927ed9d847621a8aab2b35cb3cf1837e3a3aff76e85c8fdbd0ec5cfb710df827e5060cda179faad7bff6e5b5f7f8c05d0a3fb633
- SSDEEP 49152:NHlUwPODa8TUBli1/8+kldLXPFqjHKosNFm1XF+V:NHOVW8glG8+k3LXPFqjKosnIXF+V
- TLSH T1768533DAA6DAD444CA78763D60F37E60162FBEC9003705E90E08A17A911F5E7CE771E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/NexomiaUI_v7.28.427.exe
File Explorer
-
v7.28.427.zip.zip 1.8MB
-
NexomiaUI_v7.28.427.exe.exe 78.4MB
NexomiaUI_v7.28.427.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 5c81219c7f169c9df974ae86e9169edf9b154efaae91c305199ef76ef7af2e32
- MD5 dc4b594b7ac4f48896a6f77241f2c47b
- SHA1 a12b6ab7539a9cc49d105f07174825832d1956d6
- SHA512 1dcb926119841797483a8e65cb908cc8b29577e20af97dff2dc8a390bf5ad28818fa8625f0d4b1d3a0712ff79f84c8777ceebf657c4e88f93f21ae56aaa76651
- SSDEEP 49152:buU3XapdTsIoSZHLbrdBuNd92ucC4cWDUY+IGCwzYZR5JDM:b70dr8Nd92uV4cWYHCwzG3M
- TLSH T1CF088C077CA044B9C0A5633A94B79A52BB75F8084B3533DB2EA0B6743F763D05E7AB44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4f:91:ea:22:f4:00:62:47:38:5b:8c:9b:3a:bc:48:ca:ec:80:1d:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=bucks.star,O=usTfE6jYtj,L=DzUjrUeWN,ST=B41ApDb,C=US
Chains
Aug 6, 2026
CN=bucks.star,O=usTfE6jYtj,L=DzUjrUeWN,ST=B41ApDb,C=US
Subject
CN=bucks.star,O=usTfE6jYtj,L=DzUjrUeWN,ST=B41ApDb,C=US
Serial Number
33:69:ff:25:0b:b3:f1:90
Issuer
CN=bucks.star,O=usTfE6jYtj,L=DzUjrUeWN,ST=B41ApDb,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 13, 2026 - Aug 13, 2027
Minor OS version
1
Major OS version
6
Entry point
471936
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
49KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ