General

  • Target
    shipping doc.exe
  • Size 1.1MB
  • Sample240730-ewybfstgpl
  • SHA256 5223dbf673bce63ab81bbdfecc931ddd6d9a8d3c138e269e479e56167eed1c50
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • shipping doc.exe
    .exe 1.1MB

shipping doc.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 5223dbf673bce63ab81bbdfecc931ddd6d9a8d3c138e269e479e56167eed1c50
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
84:68:e6:aa:1f:75:2e:81:70:92:68:35:68:b9:1b:52:fa:40:84:21:47:d5:98:a0:8c:e0:55:25:6c:55:80:c6
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

PE Signature issue

Digest
5f:09:b5:78:dd:c8:f1:ab:27:d3:33:0a:7a:c7:e8:12:df:10:b9:24
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Minor OS version
0
Major OS version
4
Entry point
1174374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
qPyX.pdb