msu3.7z
- SHA256 4e3c4848b7b7feae15765c774658aedcb1dbce3d83c3446c88f3ea0e654cf493
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
msu3.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu3.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target msu3.7z
- Size 1.5MB
- Sample260928-pedktstapf
- SHA256 4e3c4848b7b7feae15765c774658aedcb1dbce3d83c3446c88f3ea0e654cf493
- MD5 144c73a15d02d681340fc13a89efede1
- SHA1 2488cede2caea3dcdaf294a3b3d53ba95452d8f7
- SHA512 25a29fab9f0a22a9580c15c3f11967cb3303f9df341359539d65a33fea1538cb4314fe0cd2d15f385b6974bbce20d0019e64ae50bbaa9798319bb3bc21245df2
- SSDEEP 24576:YIRNxXx9pm+lW/pqt5qc+LduRqUTeqmb30/3XT3Yd4ktfxpTrKoYxVAaYPBL0NAA:YIRNdx9pTt5qru4qwKo6ktfxpTrKL6Kj
- TLSH T1A67533D840D81F93C8C3AD1967E96E462746EC14BDCB2FA2863E186D56BD10ED720B4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/msu3.exe
File Explorer
-
msu3.7z.7z 1.5MB
-
msu3.exe.exe 7.9MB
msu3.exe
- IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
- SHA256 38859546ef350ec40c78314007ce015888d3a7c5cc58333777f4d5c6f2a33303
- MD5 cc41c659daea53178c2c935e1b8ba751
- SHA1 83ce15386666a45bec961d85ff7189eb4a9f1d71
- SHA512 61870cbdc7d2e28c6c9765c9da4b1490bcbd79fa7dec9e12fcfdd6b76e3c904c30889f90655003d9dbb37d889b861cf4317fa06bc75dec2d4d319061225f9177
- SSDEEP 49152:+zRTsFp8nCLHWOAgC6pN4YAVAoTTQSNrA6OF7ifWmTiJt/A8FOWkqYeMYj2AEivt:eONLCU449V41Fpa3lvBr
- TLSH T1D8866B0B7A8851F4C595CB38C43B42ABB624BC8C973137E76E51BAB02FB17C1AA75744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
53:dd:bd:8c:95:4e:e0:79:05:be:3c:0e:bc:91:45:a1:52:d8:63:a6:f9:f5:8c:27:7f:27:f1:97:05:4b:36:c9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Nova Dynamics,O=Nova Dynamics,C=US
Chains
Sep 26, 2026
CN=Nova Dynamics,O=Nova Dynamics,C=US
Subject
CN=Nova Dynamics,O=Nova Dynamics,C=US
Serial Number
40:51:49:b0:54:c2:49:20:8e:12:44:c8:c8:4b:9c:7d
Issuer
CN=Nova Dynamics,O=Nova Dynamics,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 19, 2026 - Sep 26, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
401440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
51KB
Virtual Size
410KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ