General

  • Target
    TOTALCMD64.EXE
  • Size 9.9MB
  • Sample240613-qk7arsvbpl
  • SHA256 aa7d04a9fad39fb4745804a90489ef5c283b9ec780d8f577106042c9e0ed78eb
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • TOTALCMD64.EXE
    .exe 9.9MB

TOTALCMD64.EXE

  • IMPHASH 3e1f5267e7b0e14426e4958aa46de5b3
  • SHA256 aa7d04a9fad39fb4745804a90489ef5c283b9ec780d8f577106042c9e0ed78eb
  • MD5 SHA1 SHA512 SSDEEP
Digest
71:35:c1:d4:12:2e:c8:cc:16:65:99:b9:34:9e:c0:d9:c4:ad:1c:07:21:b7:3d:9a:68:4c:88:d0:70:25:44:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Ghisler Software GmbH,O=Ghisler Software GmbH,ST=Bern,C=CH
Minor OS version
0
Major OS version
4
Entry point
108688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths