v8.46.93.zip
- SHA256 bbf9ac2010870993def7fa9b91a0df06c4e690315a66b8ec2e33f3db374337a9
Static task
static1
1 signatures
General
- Target v8.46.93.zip
- Size 89.8MB
- Sample260823-nyaslsab38
- SHA256 bbf9ac2010870993def7fa9b91a0df06c4e690315a66b8ec2e33f3db374337a9
- MD5 befad5d146220cb2cb6f274621359a6b
- SHA1 46405d8dd4fddc61a6aca63c2d38dcbcfc499187
- SHA512 97edef9b69ae55f40ffb663b6f3c5c2c86c407b8372c417f57942491aca5eb38c62476d37ac555ab29e7d5e9a372e5feb48c715441e079732a22bcb1fc417e45
- SSDEEP 1572864:vZP1kbWjoH0iO4Kw+pMnki5r6IjYXIkW9wkDND3nSQg+vqaaCT1Br:vt1kKjoH0942pMkgW6YXI5tD3nSJ+Cax
- TLSH T1542833A45FB702E27A463D4744A08149011DCF529E27A6CFD4F2677C8605FF2AA8DBBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack002/EssentialUI_v8.46.93.exe
File Explorer
-
v8.46.93.zip.zip 89.8MB
-
v8.46.93.zip.zip 89.8MB
-
EssentialUI_v8.46.93.exe.exe 92.5MB
v8.46.93.zip
- SHA256 17a0170425ae72e9d6e7265b29cb68a21f3652169ef64bfb4135b6ef6a9d5e0a
- MD5 9374bd4bdab9789dd963952c7b019c90
- SHA1 11a1251f58f3dd9f42056ce0a79c1e26d31cba37
- SHA512 6d7388d6f55aaeb604849a808d849a35678c57fbbd9996e0d23507316c2b22632e50a816848a5034584fc0a2cf238280162b30e3489dd32d82d5e492bde3856e
- SSDEEP 1572864:l0VCn+fWbsE6SjjoE3YJoYRT4O54t6G0D0gvZ/ZNwA+y7yOW6dHX:l0VC+fWbsTSz3YOwcY4t6j7/ZNw9y+ON
- TLSH T1012833A46BB702E2B6463D6745608445110ECF839E37658ED8F2673C8209FF1A9CDBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
EssentialUI_v8.46.93.exe
- IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
- SHA256 96c2094ed30c0e7e2bff8a4a406678bb9398744430ffa9bfee548220a28a4d87
- MD5 b635e33d6b861826072690de6d65cf5a
- SHA1 b5cbeec254d069d2155a504b22f1d85c240919ae
- SHA512 d6273d966e5c620ad258303633fc58931a63396d9ab0f796ccde408c8c62f5de898ed93000313d4bc104b07a657c8cee819cb8fd3cca470a42486a6867610080
- SSDEEP 1572864:W6/MNwj2XUOIuVRGGRQpcQ9HiGj2HWQq1MyZlrDZg6UIFuGsE9jz:7/Mmj2XUXuNRQ6uCc2HWJjrDZgjIAGsS
- TLSH T19128330A6E6041A5D49A5F3AC1768041E134BC98C73A73DF6ED0EA342E24BD31EBBF55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
d4:8b:12:bf:35:4a:78:80:ff:69:30:42:cc:80:32:9f:24:38:bc:a6:41:ab:0f:3e:a9:6c:04:7c:0b:5e:2c:de
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Frost Spark Technologies,O=Frost Spark Technologies,C=US
Chains
Aug 23, 2026
CN=Frost Spark Technologies,O=Frost Spark Technologies,C=US
Subject
CN=Frost Spark Technologies,O=Frost Spark Technologies,C=US
Serial Number
f6:c9:27:e6:e6:31:8a:30:f0:92:fb:60:62:45:42:78
Issuer
CN=Frost Spark Technologies,O=Frost Spark Technologies,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 16, 2026 - Aug 23, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
1
Major OS version
6
Entry point
387488
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
48KB
Virtual Size
397KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ