v4.42.401.zip
- SHA256 a3d35af3cebf6beb0e51278714d165d605a933daee0949aa287293dde5aa6a16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v4.42.401.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
v4.42.401.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
v4.42.401.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
v4.42.401.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
NexomiaUI_v4.42.401.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
NexomiaUI_v4.42.401.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target v4.42.401.zip
- Size 86.7MB
- Sample260816-e61jkazdjb
- SHA256 a3d35af3cebf6beb0e51278714d165d605a933daee0949aa287293dde5aa6a16
- MD5 35b7cfffe56a5cdfd7ec373cc09aec06
- SHA1 559feb5bbde819312f648f68ec50185137593e15
- SHA512 c5470fc25b5656fbc474a3e229b568cf791523e176348ebb0178ed3c5151f4363c430bcf6979bf31dbf7ac781e6f75049ef3792514a3b02416e03d09e0971a60
- SSDEEP 1572864:SggK/+b6+K7gTcP6az8k3grX3uElYUPV7mW51u4spJZdrE54Jw2t1tlH:S3K/+b6+K7gTciaPknPVKMuvlK54K2tt
- TLSH T1351833DE05538024E4ED1A1D47B775FDEF6FE79E5A24F4DDB2838E2401403AA6ABE042
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack002/NexomiaUI_v4.42.401.exe
File Explorer
-
v4.42.401.zip.zip 86.7MB
-
v4.42.401.zip.zip 86.7MB
-
NexomiaUI_v4.42.401.exe.exe 88.1MB
v4.42.401.zip
- SHA256 f9bb9c0a10be4edd698af7abc2a64f1b87f45b1f8614139498d7810287840373
- MD5 c092da0e5f29d87e9e8748639aee4234
- SHA1 eb9981bbcdbb8e0ec2efbcceb5c764c6a6a3c693
- SHA512 75efd285fc35692aef5a8d21be7aeaf3e9985b10a83e22f8b3bb6707f6f3dc364e06a832b3b75ba5873664bc6c479858f44ad54dce6518b16e9848b386468425
- SSDEEP 1572864:5GYa8VSe650B8deUN4Kx4hP70CVW+b33gc1n0qqP/rlB8Khs2dBb/T:5Fa8VSe650B80ULwJb3wo0pbUK22dBDT
- TLSH T19218338E05538065E4AD1A1D4B7765FEDF6FEBEF6A30F4AD72838D14110026A6BBF042
- MD5 SHA1 SHA512 SSDEEP TLSH
NexomiaUI_v4.42.401.exe
- IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
- SHA256 4e13ba35ba266a26a349f232f5885db3f0110d5ab0243e73cff8db113a61637c
- MD5 8fc5926a247211164cad9c1a4d492815
- SHA1 03b9682ab2ae154677dcd32790e9f138ccba7299
- SHA512 8f33f27df5d082a98951ec84c8ce102307d54bc8da417e290e113a5bdc638ff76459c3eaa859463ee345fec542f2aac727ae89b61fb6c684c253f8269a49bf66
- SSDEEP 1572864:yjQKEARSckRkNWbs8/mQJErVTkAfgo7tjsSnJqq4PhXpL8AHy6xvDZf:yjVEARSckRkNWw8/qD7tYSqtx+AS6xv1
- TLSH T1ED18330BAC9140B9D4AA163D89B312A5BB76FC188F3533DB7E50EA342F757C11A38B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
b5:c3:79:5b:08:8c:cf:55:18:ed:c9:4f:f2:ea:04:97:2e:48:71:75:2f:2d:4a:4c:c2:0c:a0:fd:0f:e0:af:2d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Quantum Forge Industries,O=Quantum Forge Industries,C=US
Chains
Aug 16, 2026
CN=Quantum Forge Industries,O=Quantum Forge Industries,C=US
Subject
CN=Quantum Forge Industries,O=Quantum Forge Industries,C=US
Serial Number
ed:c6:7b:33:94:fd:57:12:63:a3:41:8f:42:03:a2:45
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 9, 2026 - Aug 16, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
1
Major OS version
6
Entry point
409472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
49KB
Virtual Size
596KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ