msu6.7z
- SHA256 27b6348a4cf4078a14b6881be0285388c81626e106b2f5b76f47d4a89d7cfc11
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
msu6.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu6.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target msu6.7z
- Size 3.1MB
- Sample260928-pgjjvsvsbv
- SHA256 27b6348a4cf4078a14b6881be0285388c81626e106b2f5b76f47d4a89d7cfc11
- MD5 5d841c489fe8fd309b9e4472c9d4299a
- SHA1 264274a1a9bd23c9f4e0113231537d2dc1184f99
- SHA512 308f81721cd057877d99297d8a511e0b30d3b2435a3e68a15342b2887cd8f1476ae7f4b33aae65ffbf06f1bb264ae930ec528664bb12f072675201e4ffd7d0de
- SSDEEP 98304:5AiJbq/1lXnk4Px4AVmraxJp7P7/LPJImEtxZE6Sl:K5/zXnV7IaJP7/N0U
- TLSH T110E5332F6E4DB868F2C0FAC4EA50D19871AD73B46BFFC59F202438D74A84617139AE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/msu6.exe
File Explorer
-
msu6.7z.7z 3.1MB
-
msu6.exe.exe 14.3MB
msu6.exe
- IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
- SHA256 1419d4123648dda5a541e041cb7150db016d92638d4a582146b074a955683732
- MD5 c5190b8c9341634f425dcedddc761a20
- SHA1 89699003be63f4a5f9136bdd14534f1c995b49cc
- SHA512 eb1f768c31490d2ecb22c00f0bc561e383caf13343c9aea113af4e8a17b244f58aaa9f76a61993f8109ee0c71fc4c0720cc213cc7e75c59db48b527300e99d59
- SSDEEP 49152:JalPKcHBYeURdUqrd3Q8/1+EllJWcCUuhsjTuzPhGegjpn5mo9YL8uWPHUKQmevw:9cGB5RmFkFevw
- TLSH T156E6D607334810D8D95BEB7084B0693922B13DEE5535BB4E8EA47EA12F1A7857FACF44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
55:f7:b1:b7:32:1c:40:c2:f4:35:44:96:f4:93:6d:fd:25:d9:ec:c7:4b:2a:73:cf:67:d5:b3:6f:a4:9a:f7:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Quantum Pulse Labs,O=Quantum Pulse Labs,C=US
Chains
Sep 27, 2026
CN=Quantum Pulse Labs,O=Quantum Pulse Labs,C=US
Subject
CN=Quantum Pulse Labs,O=Quantum Pulse Labs,C=US
Serial Number
23:be:42:49:8c:78:ec:bc:fe:8c:ac:4c:b7:33:1f:0f
Issuer
CN=Quantum Pulse Labs,O=Quantum Pulse Labs,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 20, 2026 - Sep 27, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
427616
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
7.3MB
Virtual Size
7.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6.8MB
Virtual Size
6.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
66KB
Virtual Size
622KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ