Deepcharts-20261101T232516Z-1-001.zip
- SHA256 e4593b52419c75e10b28c24bf24861dc095b49e4eee3f8b9a6ccc04f18157721
Static task
static1
2 signatures
General
- Target Deepcharts-20261101T232516Z-1-001.zip
- Size 105.9MB
- Sample261102-weeapavzdy
- SHA256 e4593b52419c75e10b28c24bf24861dc095b49e4eee3f8b9a6ccc04f18157721
- MD5 c5d06d02df4349915f2540ee75945649
- SHA1 1c93bd3593006dacd57f448754e44e1b5f9ce8df
- SHA512 2bc2b907eb2f47950d03f802596579f4f2a4a846f6c3b3e55d5b0d8987000cd2bb6c7980aed4ed9d958dac0be37dfdb43a8b9ee6395f5b643f8475c7674831fe
- SSDEEP 3145728:roS7yxMuFGlgwMDvPOeuh4N12xahqvTeHcD+4:rvvuV3vPOH6/8vqHcV
- TLSH T13838331F6AB469A1D934157E82A383265C95D47BF106C03BCA8DD73E2DD7B382D3E188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Deepcharts/Deepcharts Installer.exe - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Deepcharts/3 DeepchartsSetupv15.exe unpack001/Deepcharts/Deepchart.dll
File Explorer
-
Deepcharts-20261101T232516Z-1-001.zip.zip 105.9MB
-
Deepcharts/2 ExcludeDeepChart.bat241B
-
Deepcharts/3 DeepchartsSetupv15.exe.exe 15.5MB
-
Deepcharts/4 install.bat655B
-
Deepcharts/Deepchart.dll.exe 4.7MB
-
Deepcharts/Deepcharts Installer.exe.exe 89.0MB
-
Deepcharts/README.txt448B
Deepcharts/2 ExcludeDeepChart.bat
- SHA256 7d8d1b50c0902623774edd6e946011004f3d458237d145ab6e2086ef50efcc19
- MD5 20dd0229956963d11ba6743ce561cc48
- SHA1 df87afdb8e016b330d28731fc87478a8c2f29b0a
- SHA512 73d5a99714fe297ec954ce68853b48564d65aa33e193e54ca92ecd1f7b4ffc6c66ad793028c467d0658990db53ba308a61f4e26c585c23f322776ea527d53e28
- TLSH T1C2D09722037E42C7A06BC006440A9743728E09A5113F0D53263C9C393A00CC393DEC0C
- MD5 SHA1 SHA512 TLSH
Deepcharts/3 DeepchartsSetupv15.exe
- SHA256 3edec8b810ba722b0a2584ab331f05e46660c3ed89ac97e932527e89fcbc3a8d
- MD5 eeee42d3b0bdf3f5e3d852907be904b5
- SHA1 88c2143e3092e749a765f45aa754b982a3b17988
- SHA512 8833809fe518964060bd64ba02deb9b33e5792720db5bfa425a82dc4adeaed19c6ff95f3157aeca5b663f06043834c971e4c468e654d29540e0f555f653a1415
- SSDEEP 393216:OrNq5D/auDLgZU9vrXOb+CZT8vWHK0THFZzUCg1pcQa8:OrE53DLVvrXyAeHKK6D/cQa8
- TLSH T1BCF63325535EC8F1D8B7093E5C6BC3A5FC7C98284B3D089E07DD5F6D3061A8E1BA4662
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
152680
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Deepcharts/4 install.bat
- SHA256 c698166df5a1b373bf719087e7454402c90d065370ff460929170e4635761611
- MD5 ed1a8f2b1ce2a6a822feea601a500882
- SHA1 882a36f1d0aac303acfc0975bb90a50bee386b28
- SHA512 7fabc0423de8233228c631268a48e4ddd71b7948fd40b831947074a3e548f6b296bbabb1d0392649986c27a95999db55e0058e9714b43850850ec2e03c086994
- TLSH T1E2F02B0FF364173BA483CBB40ECBB8886005840744A81DBD645AC2B61E7A5C1F7E6DC4
- MD5 SHA1 SHA512 TLSH
Deepcharts/Deepchart.dll
- SHA256 698e58cda1903a58403000ab5c2010e6f0e0d4e49902e6912c69aec344a3e5da
- MD5 58562615686003d66571654a2f4c6c2c
- SHA1 8a63c71c227b096100a92eb96a35f526679a9172
- SHA512 904efb932c1af5c39ab5b3f6882ad9213ad9f0081d30cc1cd9bb46cce06a928eec4d34582d7096dac7065e36500cbfdeb2bda662aad70b37e9e04b0385903479
- SSDEEP 98304:fKSpZwAWpah2JsSrE2v2MyInlWyy5MsLAKi7:fKSpZwAWpah2JXrE2UIlWn587
- TLSH T181365C0263A8CA7AD91ED377D460456E17F1C0497B76ABE70754F8BA3C89302EE8B153
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Deepcharts/Deepcharts Installer.exe
- IMPHASH acbfc62280771933334b67077d6deaba
- SHA256 723fb10544584cffd14059efd73d02407b1cced6e18411f34946ff35193628f8
- MD5 d58aa9e51e8a94507ea10cf161058428
- SHA1 ec645cca4256c179ba71ea3c299bc6df269c62d5
- SHA512 1643bc045243d4900dafbdc6a2ecae4e5e386f141fbfed41f0847d34f5088fbc44457b2667a113556f41b2b7485b663879d507d4e3220d6834910689bb0c90c0
- SSDEEP 1572864:PbTYHMZb71lhGBHUwdzcKDXOa5rq0fe4qGsF1oaeS9mx1bdk2+49kyn4HDBR+MnZ:jTYHG97GeaNxVqGszO6iFMyQgMnv62p
- TLSH T19328337677F025A5C5B946BBD2818132BE71B15A7311813BCA89D63C2F6BA34397F308
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
86:4b:d6:21:bf:f5:0c:4a:59:66:ff:51:59:c2:92:78:74:51:fb:17
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=01583400294,CN=VOLUMETRICA TRADING SRLS,O=VOLUMETRICA TRADING SRLS,ST=Rovigo,C=IT,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024954
Chains
Mar 6, 2026
SERIALNUMBER=01583400294,CN=VOLUMETRICA TRADING SRLS,O=VOLUMETRICA TRADING SRLS,ST=Rovigo,C=IT,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024954
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=01583400294,CN=VOLUMETRICA TRADING SRLS,O=VOLUMETRICA TRADING SRLS,ST=Rovigo,C=IT,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024954
Serial Number
8a:52:e2:61:aa:fb:ea:11:c1:51:21:e7:96:f6:f3:65
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 24, 2023 - May 23, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
397552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
D:\a\wix\wix\build\burn\Release\x64\burn.pdb
kernel32
SetEnvironmentVariableW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
CreateEventW
GetCurrentProcess
CreateThread
GetNativeSystemInfo
VerSetConditionMask
GetSystemTime
GetComputerNameW
VerifyVersionInfoW
GetDateFormatW
CompareStringW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLangID
GetStringTypeW
CreateProcessW
DuplicateHandle
GetExitCodeProcess
CompareStringOrdinal
ProcessIdToSessionId
OpenProcess
GetProcessId
SetProcessShutdownParameters
CreateSemaphoreW
LocalFileTimeToFileTime
GetExitCodeThread
DosDateTimeToFileTime
CompareStringA
SetThreadExecutionState
ReleaseSemaphore
CreateMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
FreeLibrary
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RtlPcToFileHeader
GetStdHandle
GetModuleHandleExW
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
ExpandEnvironmentStringsW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetModuleFileNameW
GetSystemWow64DirectoryW
GetSystemDirectoryW
GetLocalTime
SetLastError
GetTempPathW
GetVolumePathNameW
GetTempFileNameW
GetFullPathNameW
CopyFileW
GlobalFree
GlobalAlloc
Sleep
SetFileTime
SetFilePointerEx
SetEndOfFile
ReadFile
LoadLibraryExA
GetFileSizeEx
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
FormatMessageW
LocalFree
MoveFileExW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
WaitForMultipleObjects
WaitForSingleObject
HeapSetInformation
GetLastError
lstrlenA
GetCurrentProcessId
GetModuleHandleA
MulDiv
GetSystemWindowsDirectoryW
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
LoadResource
LockResource
SizeofResource
FindResourceExA
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
WriteFile
SetFilePointer
CreateFileA
ExitProcess
CloseHandle
InitializeCriticalSectionAndSpinCount
CreateFileW
user32
GetDC
ReleaseDC
MonitorFromPoint
MonitorFromWindow
ShowWindow
IsDialogMessageW
LoadCursorW
GetMonitorInfoW
SetWindowLongPtrW
GetWindowLongPtrW
GetCursorPos
MessageBoxW
SetWindowPos
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
WaitForInputIdle
IsWindow
PostMessageW
LoadBitmapW
gdi32
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
CreateDCW
CreateCompatibleDC
GetDeviceCaps
advapi32
GetUserNameW
CryptAcquireContextW
CryptReleaseContext
QueryServiceConfigW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
GetTokenInformation
AdjustTokenPrivileges
IsWellKnownSid
LookupPrivilegeValueW
RegCreateKeyExW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
ChangeServiceConfigW
SetEntriesInAclW
DecryptFileW
InitializeAcl
CreateWellKnownSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
OpenEventLogW
CloseEventLog
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
InitiateSystemShutdownExW
RegOpenKeyExW
RegCloseKey
SetNamedSecurityInfoW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetEntriesInAclA
ole32
CoInitializeEx
CoInitialize
CoInitializeSecurity
CoUninitialize
CLSIDFromProgID
CoTaskMemFree
StringFromGUID2
CoCreateInstance
oleaut32
SysFreeString
VariantInit
SysAllocString
VariantClear
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFolderPathW
Name
.text
Size
556KB
Virtual Size
555KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
267KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
424B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=146, id=261, version=33140,
count=6, id=259, version=33140,
count=9, id=259, version=34321,
count=18, id=260, version=34321,
count=46, id=261, version=34321,
count=13, id=260, version=33140,
count=2, id=262, version=33140,
count=15, id=257, version=33140,
count=359, id=1, productName=Unmarked objects,
count=89, id=261, version=34808,
count=1, id=255, version=34808,
count=3, id=151,
count=1, id=258, version=34808,
Deepcharts/README.txt
- SHA256 e373e9aa60edac55a252da6b2e4ddb53a47afb10ba88c16f19ae382d1f9d6bfa
- MD5 7ac517625aef087dc1646fabe9f517e0
- SHA1 60bb33cd5fe599d91d6b84acc33d6f7647d66cd0
- SHA512 6fcf15bb0f2c34100275b8b2424b9d49773192ce55000ce28197886f792295a294c64dfaf7008cebe2fd62bba3be9150eff5fd2380e46a16f5e11a95b794f0eb
- TLSH T1D1F0558FEAB42F7700F302DB4CBAF662E1258883D085D009B118833020797E0D629D8B
- MD5 SHA1 SHA512 TLSH