Report - dl.cube-soft.jp/archive/cubepdf-4.3.1.exe

Report Overview

Visitedpublic

2025-05-07 04:26:23

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
dl.cube-soft.jp	unknown	unknown	No data	No data	509 B	24 MB	133.167.91.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-07	medium	dl.cube-soft.jp/archive/cubepdf-4.3.1.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

dl.cube-soft.jp/archive/cubepdf-4.3.1.exe

IP / ASN

133.167.91.226

#9371 SAKURA Internet Inc.

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

Size24 MB (23819352 bytes)

MD5026fbf5c4acb50c9512c3e9c1061f7fa

SHA13713b8c6aef8219a887c4f785f982696a921da2e

SHA25629320768a4100d70ac5ec2692e779232acdb6ac18dabc9b1a149282fd2777004

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET dl.cube-soft.jp/archive/cubepdf-4.3.1.exe

133.167.91.226

200 OK

24 MB

URL User Request GET HTTPS

dl.cube-soft.jp/archive/cubepdf-4.3.1.exe

IP / ASN

133.167.91.226

#9371 SAKURA Internet Inc.

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

First Seen2025-05-07

Last Seen2025-05-07

Times Seen1

Size24 MB (23819352 bytes)

MD5026fbf5c4acb50c9512c3e9c1061f7fa

SHA13713b8c6aef8219a887c4f785f982696a921da2e

SHA25629320768a4100d70ac5ec2692e779232acdb6ac18dabc9b1a149282fd2777004

Certificate Info

IssuerSectigo Limited

Subject*.cube-soft.jp

FingerprintA8:1E:04:BC:1A:4E:5E:85:B2:9D:C9:33:30:46:80:37:5F:A0:FE:11

ValidityFri, 07 Mar 2025 00:00:00 GMT - Mon, 06 Apr 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /archive/cubepdf-4.3.1.exe HTTP/1.1
Host: dl.cube-soft.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 May 2025 04:25:51 GMT
Content-Type: application/octet-stream
Content-Length: 23819352
Last-Modified: Tue, 08 Apr 2025 07:07:23 GMT
Connection: keep-alive
ETag: "67f4cb2b-16b7458"
Accept-Ranges: bytes