Overview

overview

8

Static

static

8

LuminaRead...85.exe

windows11-21h2-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    LuminaRead_1.6738.85.exe
  • Size 5.0MB
  • Sample261022-sd9tesds5v
  • SHA256 921eb55037b19e1642ed60c4b95686a52b3d58ce58985b09a7573a77ba4395b2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesign

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • LuminaRead_1.6738.85.exe
    .exe 5.0MB

LuminaRead_1.6738.85.exe

  • IMPHASH 42724b6379f699b1a20e8f218d186e67
  • SHA256 921eb55037b19e1642ed60c4b95686a52b3d58ce58985b09a7573a77ba4395b2
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
35:99:2a:bd:56:90:3b:89:de:bb:d2:8b:bd:35:30:80:c3:47:41:56:f3:1b:41:cc:32:3f:2a:10:99:8c:33:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91350206MA8T36LL6G,CN=Xiamen Jinduoduo Technology Consulting Co.\, Ltd.,O=Xiamen Jinduoduo Technology Consulting Co.\, Ltd.,ST=Fujian Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
3789632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths