General

  • Target
    2024-05-31_3a15927403c18891f1c6ff261b863ab5_mafia_revil_skypams
  • Size 19.9MB
  • Sample240531-mhal8sef4t
  • SHA256 88547237d688b92076202601ae72c1cd580d735c65be2adb356618f6d8aa75a5
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-05-31_3a15927403c18891f1c6ff261b863ab5_mafia_revil_skypams
    .exe 19.9MB

2024-05-31_3a15927403c18891f1c6ff261b863ab5_mafia_revil_skypams

  • IMPHASH 5406095b1d8784e4ae7b8dea1cc60be3
  • SHA256 88547237d688b92076202601ae72c1cd580d735c65be2adb356618f6d8aa75a5
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
c7:64:10:cd:00:2f:7b:ec:1a:59:c1:8b:ec:3f:77:0d:31:68:19:54
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Adlice,O=Adlice,L=Orvault,ST=Loire Atlantique,C=FR
Minor OS version
1
Major OS version
5
Entry point
8940451
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Tools_git_priv\RogueKillerQt\Release\RogueKillerQt.pdb