84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5

Sharing

Copy URL Twitter E-mail

General

Target
84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5
Size 648KB
Sample260825-lvksasgp21
SHA256 84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5
MD5 42fbdd30f1a20371485c182d39dca67b
SHA1 45852987731b09d7c81a20a142f25169ad606dd6
SHA512 3314ae28fa5fd2fe4a6c8c35f4766ba1a1264e706a75c0a5a5a1dae61c5a3ad4e64b399622064f63a7049823d4ee918bfba9d208e5a94c16a1a28503e73e3edb
SSDEEP 12288:wtb+iJsOs1Mk3/DhbE/Jvb1P0hyIIVHjMnjiDH6IECxGcLQXedXYwoSBh:wdtsfJhA/JVsk94nWDd+NX4YIh
TLSH
T154E42393B9357E08EA282E749483E07645075FA95A318B7F2CF23DA77F7E6225F41810
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5

File Explorer

84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5

.exe 648KB

84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5

SHA256 84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5
MD5 42fbdd30f1a20371485c182d39dca67b
SHA1 45852987731b09d7c81a20a142f25169ad606dd6
SHA512 3314ae28fa5fd2fe4a6c8c35f4766ba1a1264e706a75c0a5a5a1dae61c5a3ad4e64b399622064f63a7049823d4ee918bfba9d208e5a94c16a1a28503e73e3edb
SSDEEP 12288:wtb+iJsOs1Mk3/DhbE/Jvb1P0hyIIVHjMnjiDH6IECxGcLQXedXYwoSBh:wdtsfJhA/JVsk94nWDd+NX4YIh
TLSH
T154E42393B9357E08EA282E749483E07645075FA95A318B7F2CF23DA77F7E6225F41810
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

dc:dc:68:60:66:8e:86:e6:c6:6c:a1:4d:3d:64:59:73:96:45:f2:d4:2f:b3:10:5a:a9:37:6c:c2:51:ad:3c:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=BDGroup-lab.com,OU=BDGroup-lab.com,ST=Jiangsu,C=CN

Chains

Aug 24, 2026

CN=BDGroup-lab.com,OU=BDGroup-lab.com,ST=Jiangsu,C=CN

CN=BDGroup-lab Code Certification Authority,OU=Code Certification Authority,ST=Jiangsu,C=CN

Subject

CN=BDGroup-lab.com,OU=BDGroup-lab.com,ST=Jiangsu,C=CN

Serial Number

70:19:50:41:25:e8:ea:a5

Issuer

CN=BDGroup-lab Code Certification Authority,OU=Code Certification Authority,ST=Jiangsu,C=CN

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 16, 2026 - Feb 16, 2027

Subject

CN=BDGroup-lab Code Certification Authority,OU=Code Certification Authority,ST=Jiangsu,C=CN

Serial Number

4b:d2:e6:43:3d:07:77:1b

Issuer

CN=BDGroup-lab Root Certificate Authority 2022,O=BDGroup-lab,ST=Jiangsu,C=CN

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 17, 2022 - Dec 17, 2032

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Subject

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Serial Number

90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Mar 24, 2041

Subject

CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB

Serial Number

e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15

Issuer

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Jun 24, 2037

Minor OS version

Major OS version

Entry point

2061344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

84de95d4c704c6d2525d43dc314a9377970509227b8645c3f4787cc279eaacb5

PE Signature issue

generic