General

  • Target
    UninstallTool.exe
  • Size 5.5MB
  • Sample240319-rmjg6adh86
  • SHA256 6fae978f6613699a9ca3a5a531cab77dd6a2e167b671dca84a7d81f06475c4c0
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • UninstallTool.exe
    .exe 5.5MB

UninstallTool.exe

  • IMPHASH e20c11d75c7d6480c518558e29d8ee28
  • SHA256 6fae978f6613699a9ca3a5a531cab77dd6a2e167b671dca84a7d81f06475c4c0
  • MD5 SHA1 SHA512 SSDEEP
Digest
20:c3:27:99:49:bb:aa:66:ba:e2:63:1c:5d:57:8c:4d:f3:9b:0c:99:3a:35:df:c7:72:6e:a8:4b:7d:bd:f3:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=CrystalBit Solutions,O=CrystalBit Solutions,ST=West-Vlaanderen,C=BE
Digest
90:b6:11:62:70:fb:0f:de:14:b9:fc:92:ae:7b:f8:33:c1:ac:66:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=CrystalBit Solutions,O=CrystalBit Solutions,ST=West-Vlaanderen,C=BE
Minor OS version
0
Major OS version
6
Entry point
3063928
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
G:\Projects\uninstall-tool\Ready\UninstallTool.pdb