General

  • Target
    s.bin
  • Size 82.5MB
  • Sample240807-qb91assdpc
  • SHA256 68395be6acccbc33328eeb307f5fe190da71f801fcd6d9aa5b3536b9723bceb6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detects HijackLoader (aka IDAT Loader) 1 IoCs
  • Hijackloader family

File Explorer

  • s.bin
    .exe 82.5MB

s.bin

  • IMPHASH b3a433e978cbe75b174b2888ba134222
  • SHA256 68395be6acccbc33328eeb307f5fe190da71f801fcd6d9aa5b3536b9723bceb6
  • MD5 SHA1 SHA512 SSDEEP
  • Detects HijackLoader (aka IDAT Loader)

PE Signature issue

Digest
27:cc:04:f3:9b:a3:8f:c9:d4:8e:6d:1a:62:de:9c:4f:19:4d:33:7d:2f:33:76:35:a7:6e:73:24:fc:21:9c:78
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Andrey Borodin,O=Andrey Borodin,L=Voronezh,C=RU
Minor OS version
2
Major OS version
5
Entry point
5530048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths