Overview

overview

5

Static

static

5

db4b2ec480...c7.exe

windows10-2004-x64

5

db4b2ec480...c7.exe

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    db4b2ec480a0bb8fbb920b6e8175f71d4a9e9718ce89be625a43bc9a2fe38dc7
  • Size 824KB
  • Sample260831-levmkagl7v
  • SHA256 db4b2ec480a0bb8fbb920b6e8175f71d4a9e9718ce89be625a43bc9a2fe38dc7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • db4b2ec480a0bb8fbb920b6e8175f71d4a9e9718ce89be625a43bc9a2fe38dc7
    .exe 824KB
  • out.upx
    .exe 2.2MB

db4b2ec480a0bb8fbb920b6e8175f71d4a9e9718ce89be625a43bc9a2fe38dc7

  • SHA256 db4b2ec480a0bb8fbb920b6e8175f71d4a9e9718ce89be625a43bc9a2fe38dc7
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d2:94:22:7b:33:f0:bb:19:7e:d0:01:85:7d:6f:d1:c0:c5:68:8d:2a:6d:fb:cb:58:2f:60:65:4f:a7:c3:03:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=广州翊柯信息技术有限公司,O=广州翊柯信息技术有限公司,L=广州,ST=广东,C=CN,1.2.840.113549.1.9.1=#0c0b6869406e656b6f2e6b696d
Minor OS version
1
Major OS version
6
Entry point
2603952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths