Overview

overview

8

Static

static

1

ReShade_Se....0.exe

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    ReShade_Setup_5.7.0.exe
  • Size 3.1MB
  • Sample240428-vt1lsscf52
  • SHA256 d0f00824812b0e6ac45b84966165f9d4232e07dbcbec5de91ea1c5af2e001f61
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • ReShade_Setup_5.7.0.exe
    .exe 3.1MB

ReShade_Setup_5.7.0.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 d0f00824812b0e6ac45b84966165f9d4232e07dbcbec5de91ea1c5af2e001f61
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86

PE Signature issue

Digest
ca:43:4b:a5:31:6f:80:08:03:45:12:8e:98:45:99:1f:41:da:05:98
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=ReShade,1.2.840.113549.1.9.1=#0c0f696e666f40726573686164652e6d65
Chains

Feb 26, 2023

Minor OS version
0
Major OS version
4
Entry point
111630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths