General

  • Target
    fa99d031d39f9eed5316089fc456f374777cfea5c74159cba7173924c7aefcd8
  • Size 2.8MB
  • Sample240331-scftysdh4s
  • SHA256 fa99d031d39f9eed5316089fc456f374777cfea5c74159cba7173924c7aefcd8
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • fa99d031d39f9eed5316089fc456f374777cfea5c74159cba7173924c7aefcd8
    .exe 2.8MB

fa99d031d39f9eed5316089fc456f374777cfea5c74159cba7173924c7aefcd8

  • IMPHASH 6982d3d5fd18d3ebea7d16d31253591b
  • SHA256 fa99d031d39f9eed5316089fc456f374777cfea5c74159cba7173924c7aefcd8
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
3d:e7:29:17:06:6e:66:a4:41:5b:27:a9:d3:c6:43:49:d7:d8:4a:46:0b:e5:3d:e4:03:be:73:7e:da:e8:ba:b1
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

PE Signature issue

Digest
d8:65:40:d1:93:f1:86:ce:42:18:15:5d:a7:0a:ff:de:f4:44:ff:c6
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN
Chains

Mar 29, 2024

Minor OS version
0
Major OS version
6
Entry point
1233315
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\tools\agent\workspace\office\src\WeChatXfile\output\Release\WeChatXFile.pdb