2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7.bin.exe
Size 8.3MB
Sample260817-gac5hateqb
SHA256 2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7
MD5 4e90efe7de51f3551b96ba82e0d5db3e
SHA1 a4a89c3d81a7f88a4b8a20cb639aef7e9f300e3e
SHA512 fbae438a4f52d4e8f00aab65ea299acf4f9a283b2399d1d2b7135d446044dfed4d8b1dffa4271ac106fe33374e254addd4627931cbbb4a76c41ab255374a2be5
SSDEEP 98304:fvUvEynNMrWdZQDI1R5bUvsIKXiGQwyogzzKzBrKYa:l+NM6eSDgkIKXXQc6QJg
TLSH
T187969E07BDA184A8C49AE730C9B396927774BC498B3263D32E50EB782F767E45D79700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7.bin.exe

File Explorer

2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7.bin.exe

.exe 8.3MB

2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7.bin.exe

IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
SHA256 2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7
MD5 4e90efe7de51f3551b96ba82e0d5db3e
SHA1 a4a89c3d81a7f88a4b8a20cb639aef7e9f300e3e
SHA512 fbae438a4f52d4e8f00aab65ea299acf4f9a283b2399d1d2b7135d446044dfed4d8b1dffa4271ac106fe33374e254addd4627931cbbb4a76c41ab255374a2be5
SSDEEP 98304:fvUvEynNMrWdZQDI1R5bUvsIKXiGQwyogzzKzBrKYa:l+NM6eSDgkIKXXQc6QJg
TLSH
T187969E07BDA184A8C49AE730C9B396927774BC498B3263D32E50EB782F767E45D79700
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1a:1b:5c:f7:53:67:69:54:27:d6:c6:c4:29:95:ee:bc:9a:86:ff:2a:e7:45:a1:22:c1:46:14:82:50:e3:52:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Velunexis Labs,O=Velunexis Labs,C=US

Chains

Aug 16, 2026

CN=Velunexis Labs,O=Velunexis Labs,C=US

Subject

CN=Velunexis Labs,O=Velunexis Labs,C=US

Serial Number

94:ad:de:0c:2d:89:73:2d:2f:68:97:bd:5b:39:eb:42

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 9, 2026 - Aug 16, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

416544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.6MB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

73KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

297B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

245KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

533KB

Virtual Size

533KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

503KB

Virtual Size

503KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

191KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7.bin.exe

PE Signature issue

kernel32

generic