General

  • Target
    Duplicate_Check_Local_Server.exe
  • Size 288.9MB
  • Sample240612-tl7vgavekm
  • SHA256 be9a70961be290dff98c0910938dd8508882485c5d027ea3cce93d9166f04c9d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • Duplicate_Check_Local_Server.exe
    .exe 288.9MB

Duplicate_Check_Local_Server.exe

  • IMPHASH e9bb4b1e130c95413050fc074b05db2b
  • SHA256 be9a70961be290dff98c0910938dd8508882485c5d027ea3cce93d9166f04c9d
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
7a:ef:fd:c7:2f:46:e6:16:d7:f7:69:af:cb:3f:ea:02:c8:10:df:90:3b:00:ca:67:69:c7:08:02:5f:0f:b4:9f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=60006048,CN=Plauti B.V.,O=Plauti B.V.,STREET=Jansbuitensingel 6,L=Arnhem,ST=Gelderland,C=NL,1.2.840.113549.1.9.1=#0c12737570706f727440706c617574692e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
217184
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths