General

  • Target
    QI9001-ME-SPC-00126_(MR_for_Power_Equip_Svcs_Rev-P0).exe
  • Size 643KB
  • Sample240411-amrebsfc39
  • SHA256 0f8e87f65705a406bb28704fd4256433be699f8aefd70c1eb11ee561cc27c6b8
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • QI9001-ME-SPC-00126_(MR_for_Power_Equip_Svcs_Rev-P0).exe
    .exe 643KB
  • Aandelseres.Vir
    .ps1 56KB
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/Celioelytrotomy65.dis
    428KB
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/manically.por
    580KB
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/parolee.ast
    563KB
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/raadfrslerne.txt
    347B
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/simplifikationerne.car
    523KB
  • Omgaengelig/Buggane/Electrometallurgy111/Offerlammenes/udsathed.fis
    413KB
  • Restaff.Sma
    310KB

QI9001-ME-SPC-00126_(MR_for_Power_Equip_Svcs_Rev-P0).exe

  • IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
  • SHA256 0f8e87f65705a406bb28704fd4256433be699f8aefd70c1eb11ee561cc27c6b8
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
1a:3a:3e:50:98:8d:62:99:71:c7:60:0a:72:c0:86:82:09:89:85:6c:fe:1a:cd:b0:ef:3f:b8:95:6c:62:62:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Erigere,OU=Infects Concordly Filstandarder\ ,O=Erigere,L=Saintes,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c22556e706c65616461626c6532313640416273656e746d696e6465646e6573732e4f76
Chains

Apr 10, 2024

Minor OS version
0
Major OS version
4
Entry point
13054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths