General

  • Target
    notepad++.exe
  • Size 5.9MB
  • Sample240613-pc5arsscmn
  • SHA256 bc1256e8d35c24431c53011153d7bfcb3453aee2bc00efafe29e97ed4f39ba5b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • notepad++.exe
    .exe 5.9MB

notepad++.exe

  • IMPHASH 4481eeeb8d1e4d61d2ba670ce2825b57
  • SHA256 bc1256e8d35c24431c53011153d7bfcb3453aee2bc00efafe29e97ed4f39ba5b
  • MD5 SHA1 SHA512 SSDEEP
Digest
0b:eb:fd:18:ef:68:68:d3:ba:ea:ad:90:e3:69:10:01:61:a2:d2:27
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Minor OS version
2
Major OS version
5
Entry point
3446304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\sources\notepad-plus-plus\PowerEditor\bin64\npp.pdb