General

  • Target
    8d07371ac8bf6b12463828c3b098b896
  • Size 2.5MB
  • Sample240203-wzerysfdf5
  • SHA256 140ee3216d8a016a5c971e3607c9b1e4211c1e08feabc4ac14650e245e758db9
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

File Explorer

  • 8d07371ac8bf6b12463828c3b098b896
    .exe 2.5MB
  • .data
    512B
  • .rdata
    6KB
  • .reloc
    3KB
  • .text
    24KB
  • CERTIFICATE
    3KB
  • [0]
    2.5MB

8d07371ac8bf6b12463828c3b098b896

  • IMPHASH 430c1858a4e4c0d3836219f5aafee92e
  • SHA256 140ee3216d8a016a5c971e3607c9b1e4211c1e08feabc4ac14650e245e758db9
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
6d:76:4f:c6:c7:8c:bb:0d:2e:9e:96:80:70:99:89:5c:83:34:7c:b2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Stunning Apps,O=Stunning Apps,L=Philadelphia,ST=Pennsylvania,C=US
Chains

Jun 30, 2015

Minor OS version
1
Major OS version
5
Entry point
13201
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths