General

  • Target
    e778bb2a5cf80db389e541958d9c3bf2
  • Size 1.2MB
  • Sample240125-xwpcnaecgn
  • SHA256 489485f76c425b348691243b18355c39990c477483b8f2eca99d9df8225ba3f9
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • e778bb2a5cf80db389e541958d9c3bf2
    .exe 1.2MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/merinould.mon
    232KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/oppignorate.dor
    171KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/pissoirs.usl
    208KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/rakkerkngtens.out
    126KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/salmebger.bre
    82KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/sining.cir
    198KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/skridtet.hom
    289KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/srlings.ann
    167KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/stratificerendes.hen
    56KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/stumpnsens.ind
    248KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/suderne.fas
    271KB
  • Hulke/Kernelegemerne/Skodning/Rapsmarkerne/trig.can
    201KB
  • Hurdle.dis
    234KB
  • Kllingeknude130/Besgelsestid/Infinitesimal/Hardest.sjo
    108KB
  • Longwort.txt
    367B
  • Monometer/tussers.ple
    137KB
  • Monometer/upstay.fac
    279KB
  • Monometer/workshoppers.spa
    193KB
  • Monometer/zanker.gen
    276KB
  • Partaker195.est
    304KB
  • Pions.Bro
    412KB
  • antipragmatical.fri
    291KB
  • brandesianerens.deb
    123KB
  • chromatolytic.nom
    198KB
  • extentions.bal
    282KB
  • fiberfill.lan
    117KB
  • fraadserierne.rip
    141KB

e778bb2a5cf80db389e541958d9c3bf2

  • IMPHASH 671f2a1f8aee14d336bab98fea93d734
  • SHA256 489485f76c425b348691243b18355c39990c477483b8f2eca99d9df8225ba3f9
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
9a:46:1c:17:64:9b:6e:4f:d4:06:01:83:e9:d9:48:68:42:00:47:6a:38:ff:99:c3:ea:5d:0b:68:38:a3:e2:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Konfiturerne,O=Konfiturerne,L=Saint-Girons,ST=Occitanie,C=FR,1.2.840.113549.1.9.1=#0c1348616d6d6572736c616740736b65792e4f7262
Chains

Jan 23, 2024

PE Signature issue

Digest
65:a9:fb:2e:4e:fe:d6:fd:bc:92:16:67:43:5c:48:02:e8:6b:4a:84
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Konfiturerne,O=Konfiturerne,L=Saint-Girons,ST=Occitanie,C=FR,1.2.840.113549.1.9.1=#0c1348616d6d6572736c616740736b65792e4f7262
Chains

Jan 25, 2024

Minor OS version
0
Major OS version
4
Entry point
13240
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths