Overview

overview

10

Static

static

1

IMG4546646...27.exe

windows7-x64

10

IMG4546646...27.exe

windows10-2004-x64

8

truxillic.ott

windows7-x64

3

truxillic.ott

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    IMG45466464242444674747884Immigreret27.exe
  • Size 909KB
  • Sample240814-k8xtcathmg
  • SHA256 74889c0dfbf5d5281bc934e561819a604554321586c47f26500f69f23f0f0d7e
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs
    installer

File Explorer

  • IMG45466464242444674747884Immigreret27.exe
    .exe 909KB
  • Antidumpingregler.kik
    362KB
  • Betel191.txt
    365B
  • Jenbrynsfarvens27.Bol
    52KB
  • exorcism.ove
    792KB
  • truxillic.ott
    544KB

IMG45466464242444674747884Immigreret27.exe

  • IMPHASH 0293eec0b5432ad092f24065016203b2
  • SHA256 74889c0dfbf5d5281bc934e561819a604554321586c47f26500f69f23f0f0d7e
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86

PE Signature issue

Digest
7b:c2:16:a3:fa:25:f4:3e:3e:b0:13:eb:5b:00:40:5c:90:89:0e:26:72:26:33:22:9f:5f:75:2c:b1:aa:b4:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vandringernes Daemonologi oplbene\ ,O=Kolonihaverne,L=Guise,ST=Hauts-de-France,C=FR
Chains

Aug 5, 2024

Minor OS version
0
Major OS version
4
Entry point
13553
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths