msu5.7z
- SHA256 0b90b9844f608f0f40b3a25e400e867f329022e287fbb96a5511f396ac6e8644
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
msu5.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu5.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target msu5.7z
- Size 2.9MB
- Sample261002-k39wqa1hmf
- SHA256 0b90b9844f608f0f40b3a25e400e867f329022e287fbb96a5511f396ac6e8644
- MD5 bbb3fad121a8e96ac22c898d167d5f02
- SHA1 99955a864a00f80c3f141e1bc05a7c45a67e9607
- SHA512 c690ca6ae496979357c1a16cbf2507dc10735216685374e3c523faf198d64588160b81cef42a0494a46ff4715137d4747fd6d03ead2ff076a6054c8f80cfcc33
- SSDEEP 49152:iJDFE7vLYlFrnZhE4v7pPY6eAHOgHtZrWQdihUTzZC1kcRGl+wq15l:y+LYjNhE4DpwDAHH/TIhedC/g+wC
- TLSH T105D5334B03F9B0F176E309DB8FE4C2DA4975AFA47C516033EEC684CE6446545AA643B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/msu5.exe
File Explorer
-
msu5.7z.7z 2.9MB
-
msu5.exe.exe 12.7MB
msu5.exe
- IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
- SHA256 f6605a4f6e2570cf98f1bb83322255ea6fb922899610b9414b70253fff59b099
- MD5 7d7d70c5b50db68e355a95c8ceecafda
- SHA1 2a7f40f6b698de0099fe188ccdab051c39ea8bd3
- SHA512 187b2aaf86f60d391c983703d47af3f9e6d2103b98cd62d8841c745c142de9b523ae90532e8984c731f0f7b4ef48ceb541b5c4a6c61a8f46372d2c48f931bbef
- SSDEEP 49152:CZhzl1M//1zeRHe7lv9bUFpnOsbnA94/ysnFHQoSsYmPQI4hOqRqomcfu1Mx/E+L:wvqBNKC
- TLSH T186D61B07B24910ECC64BD37084F46A7A66F23DAE5632775A0E996FA02F127917FE4F04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
13:1a:3d:52:97:50:30:eb:ed:6c:8e:9b:f7:82:4c:85:d8:7d:ac:1e:5d:0d:39:b5:ec:c2:ae:b8:4d:6d:ee:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Quantum Signal Holdings,O=Quantum Signal Holdings,C=US
Chains
Oct 1, 2026
CN=Quantum Signal Holdings,O=Quantum Signal Holdings,C=US
Subject
CN=Quantum Signal Holdings,O=Quantum Signal Holdings,C=US
Serial Number
64:95:af:de:b6:ca:66:ca:d2:11:0f:be:9b:aa:ee:55
Issuer
CN=Quantum Signal Holdings,O=Quantum Signal Holdings,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2026 - Oct 1, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
395296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7.4MB
Virtual Size
7.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
96KB
Virtual Size
463KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ