General

  • Target
    2024-08-16_d2a063bd0be739f6e149fafffee4c702_floxif_mafia
  • Size 1.8MB
  • Sample240816-rwallstcpn
  • SHA256 748798b7ca71a3c290c7a273b922cd7c24744eb9ecf317c7006203f710f6b790
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-08-16_d2a063bd0be739f6e149fafffee4c702_floxif_mafia
    .exe 1.8MB

2024-08-16_d2a063bd0be739f6e149fafffee4c702_floxif_mafia

  • IMPHASH 1fdb052609eec9b15b704fa8bac64f51
  • SHA256 748798b7ca71a3c290c7a273b922cd7c24744eb9ecf317c7006203f710f6b790
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
0f:40:f6:d1:b3:ba:ba:31:f6:59:55:0d:78:fa:8c:d0:cd:49:a4:05
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Hewlett-Packard Company,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Hewlett-Packard Company,L=Andover,ST=Massachusetts,C=US
Chains

Dec 14, 2012

Minor OS version
1
Major OS version
5
Entry point
1060164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\katte\works\SmartPrint\SCM\branches\SmartPrint2.0\extensions\InternetExplorer\Espresso\Release\SmartPrintSetup.pdb