553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611

General

Target
553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611
Size 9.1MB
Sample261002-w7tk3svfle
SHA256 553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611
MD5 04688a0abdfe5c73bcbbeab87621281b
SHA1 aff2a4461a9ea483e0b16def7d8b42503c4ea0df
SHA512 f01f59b5c91042bb55ddcb8c31ecd7cce89e366386e982bf583934ef832de5a124d171438f916782b8f00c37b96f5cae3d039f1bb8560892cd5943acba21d79a
SSDEEP 196608:/+4ZFSRygWU4r/qkuIFslXEu4zRWx9hebAZj3lvhcqo4N2UV6/wi:BZFSRZW5r/qRCsF4QheMjv2uN2si
TLSH
T11AA63387A494112AF7A5A5788C8C78E6FF0D9810E5DEE1B38F8AC641C93DFD269C1743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611

File Explorer

553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611

.exe 9.1MB

553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611

SHA256 553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611
MD5 04688a0abdfe5c73bcbbeab87621281b
SHA1 aff2a4461a9ea483e0b16def7d8b42503c4ea0df
SHA512 f01f59b5c91042bb55ddcb8c31ecd7cce89e366386e982bf583934ef832de5a124d171438f916782b8f00c37b96f5cae3d039f1bb8560892cd5943acba21d79a
SSDEEP 196608:/+4ZFSRygWU4r/qkuIFslXEu4zRWx9hebAZj3lvhcqo4N2UV6/wi:BZFSRZW5r/qRCsF4QheMjv2uN2si
TLSH
T11AA63387A494112AF7A5A5788C8C78E6FF0D9810E5DEE1B38F8AC641C93DFD269C1743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c7:a4:29:e9:4d:f7:11:31:a9:8d:56:db:90:e3:f6:ca:dd:ca:05:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=深圳市鸿巨昌科技有限公司

Chains

Sep 23, 2026

CN=深圳市鸿巨昌科技有限公司

Subject

CN=深圳市鸿巨昌科技有限公司

Serial Number

15:19:8b:f8:04:16:a6:98:44:7e:11:56:2e:d1:07:7d

Issuer

CN=深圳市鸿巨昌科技有限公司

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 25, 2022 - Dec 31, 2039

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

1

Major OS version

5

Entry point

17634176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=50, id=259, version=30795,

count=207, id=261, version=30795,

count=2, id=199, version=41118,

count=32, id=259, version=24123,

count=69, id=261, version=24123,

count=39, id=260, version=24123,

count=41, id=260, version=30795,

count=1, id=262, version=30795,

count=29, id=257, version=30795,

count=509, id=1, productName=Unmarked objects,

count=881, id=260, productName=VS2015 [14.0] build 23026, version=23026,

count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1173, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=41, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

Sharing

General

Malware Config

Signatures

File Explorer

553f93f66fe758dad83089a50c2d49008b3eed5a675c8affa85048e2f2979611

PE Signature issue

generic