64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.zip
- SHA256 e7552799c3c15c3e3fdf93c3cc2dc04beec2c396cf6dd0d5c960c42778dac1ff
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.zip
- Size 2.1MB
- Sample261022-s5ga7avy2m
- SHA256 e7552799c3c15c3e3fdf93c3cc2dc04beec2c396cf6dd0d5c960c42778dac1ff
- MD5 0fb5130380004263adeff8c311bf6f65
- SHA1 ee0c4a9766338152a1a96a2c06376817cba4d915
- SHA512 468cc8cd91abf84581d7399843276cec30ff0a37f4a652bcf7f983f4ea8afd1f9576d0bcc9909bf1d9b9e6ba641ed1d43268954d0da8f4ee20153032f13bf9f8
- SSDEEP 24576:GKDH+e3v+21sDWudupORl0eeRy4GuIW7zX8gI8Rk+UFrYxupg:TDey+Uuks/0vylW7zX8gI8+FrYxue
- TLSH T128A5D119978BE5B7C19C5170615F8BAF7AB185DE06A1830AC3668C6E2CD3FC47F61E02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.exe
File Explorer
-
64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.zip.zip 2.1MB
-
64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.exe.exe 811.2MB
64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 64bfdb2fa7d5c333a7678a32a3e480195d8c4273515e710a86b73cad2c288a80
- MD5 2a58747c62f1984e1ea530cb9d901097
- SHA1 b4e268fd8f837d14b3e073286be11a6d897e2cd0
- SHA512 e3a9d1a5caa738b3021083a82ad7f9d400c42c06d21900f554d42b7886faf9bc360fe31728fb12b3ca428986b600ca61c5bb294b8b802a8b5fd4a7d83125dea1
- SSDEEP 24576:o4N/KlpTo6+a5uDWLgYfdK2PVXAPpxL7GcpG8U3QDfym+wLYIh3CKyDW2c8:oiilpk+7gYfdTXAPL6lhwLxdyDpc8
- TLSH T129994B03BD94D5A4D09AA638C97F5263A6317C48DB3173E32E90AA382FB73C19DB4754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
58:99:2e:cb:e6:f6:b2:95:f6:42:b3:2c:83:be:b5:66:93:cb:ad:47:0e:94:f1:89:2c:b0:6a:04:d2:46:e5:b8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Titan Union,O=Titan Union,C=US
Chains
Oct 22, 2026
CN=Titan Union,O=Titan Union,C=US
Subject
CN=Titan Union,O=Titan Union,C=US
Serial Number
60:9b:d2:3a:cc:fc:6e:7e:b3:a2:19:e7:3c:82:c5:98
Issuer
CN=Titan Union,O=Titan Union,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 15, 2026 - Oct 22, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
452128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
367KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
120KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ