magikremake.rar
- SHA256 4cc9f872ca745f98ff2755933aba8d84ca7233d53381799ba2e388c085664e6f
Overview
overview
10Static
static
10magik rema...m1.vbs
windows7-x64
1magik rema...m1.vbs
windows10-2004-x64
1magik rema...m2.vbs
windows7-x64
1magik rema...m2.vbs
windows10-2004-x64
1magik rema...m4.vbs
windows7-x64
1magik rema...m4.vbs
windows10-2004-x64
1magik rema...er.vbs
windows7-x64
1magik rema...er.vbs
windows10-2004-x64
1magik rema...es.vbs
windows7-x64
1magik rema...es.vbs
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...UI.dll
windows7-x64
1magik rema...UI.dll
windows10-2004-x64
1magik rema...p2.exe
windows7-x64
10magik rema...p2.exe
windows10-2004-x64
10magik rema...cs.dll
windows7-x64
1magik rema...cs.dll
windows10-2004-x64
1magik rema...p2.exe
windows7-x64
3magik rema...p2.exe
windows10-2004-x64
3magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1magik rema...I2.dll
windows7-x64
1magik rema...I2.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
magik remake/WindowsFormsApp2/Form1.vbs
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
magik remake/WindowsFormsApp2/Form1.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
magik remake/WindowsFormsApp2/Form2.vbs
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
magik remake/WindowsFormsApp2/Form2.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
magik remake/WindowsFormsApp2/Form4.vbs
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
magik remake/WindowsFormsApp2/Form4.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
magik remake/WindowsFormsApp2/Properties/Resources.Designer.vbs
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
magik remake/WindowsFormsApp2/Properties/Resources.Designer.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
magik remake/WindowsFormsApp2/Properties/Resources.vbs
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
magik remake/WindowsFormsApp2/Properties/Resources.vbs
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
magik remake/WindowsFormsApp2/bin/Debug/Siticone.UI.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
magik remake/WindowsFormsApp2/bin/Debug/Siticone.UI.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
Resource
win7-20240708-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target magikremake.rar
- Size 15.3MB
- Sample240902-qpkmkasbja
- SHA256 4cc9f872ca745f98ff2755933aba8d84ca7233d53381799ba2e388c085664e6f
- MD5 b08efa619b07842b51cfe9b2e8ddc510
- SHA1 d0ecffd729713d180e17a6e22c9ffae17d619783
- SHA512 61620d3618228a77b3cdecb3321ad3edd3e930697634d8ce89ef8966d95041ea31e29c11ef11b8de434fe292762494e3156100a91530981ac2aaedce28032774
- SSDEEP 393216:y666+4LLq9EwVfAJOh34mZujhy/D+O/sJs3iT:RRq9d5AchImZBaSsEiT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- AgentTesla payload 9 IoCs
resource yara_rule static1/unpack001/magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll family_agenttesla static1/unpack001/magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll family_agenttesla - Agenttesla family
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe unpack001/magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll unpack001/magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
File Explorer
-
magikremake.rar.rar 15.3MB
-
magik remake/.vs/WindowsFormsApp2/FileContentIndex/bbcfc6bb-cd18-4b63-9c13-bf9271aa79e7.vsidx613KB
-
magik remake/.vs/WindowsFormsApp2/FileContentIndex/dd5ae10a-f103-4e06-adf0-26a038b47d16.vsidx107B
-
magik remake/.vs/WindowsFormsApp2/v17/.suo107KB
-
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.backup.json9KB
-
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.json9KB
-
magik remake/WindowsFormsApp2.sln1KB
-
magik remake/WindowsFormsApp2/.vs/WindowsFormsApp2.csproj.dtbcache.json5KB
-
magik remake/WindowsFormsApp2/App.config189B
-
magik remake/WindowsFormsApp2/Form1.Designer.cs16KB
-
magik remake/WindowsFormsApp2/Form1.cs862B
-
magik remake/WindowsFormsApp2/Form1.resx.vbs 63KB
-
magik remake/WindowsFormsApp2/Form2.Designer.cs20KB
-
magik remake/WindowsFormsApp2/Form2.cs3KB
-
magik remake/WindowsFormsApp2/Form2.resx.vbs 56KB
-
magik remake/WindowsFormsApp2/Form4.Designer.cs12KB
-
magik remake/WindowsFormsApp2/Form4.cs492B
-
magik remake/WindowsFormsApp2/Form4.resx.vbs 5KB
-
magik remake/WindowsFormsApp2/Program.cs548B
-
magik remake/WindowsFormsApp2/Properties/AssemblyInfo.cs1KB
-
magik remake/WindowsFormsApp2/Properties/Resources.Designer.cs.vbs 10KB
-
magik remake/WindowsFormsApp2/Properties/Resources.resx.vbs 10KB
-
magik remake/WindowsFormsApp2/Properties/Settings.Designer.cs1KB
-
magik remake/WindowsFormsApp2/Properties/Settings.settings249B
-
magik remake/WindowsFormsApp2/Resources/close.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/close1.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage.png.png 5KB
-
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage1.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaassssss1111111111age.png.png 9KB
-
magik remake/WindowsFormsApp2/Resources/imaasdadasdadasdge.png.png 2KB
-
magik remake/WindowsFormsApp2/Resources/imag12313123e.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/imagaaaaaaaaaaaaaaaaaaaaaaae.png.png 1KB
-
magik remake/WindowsFormsApp2/Resources/image.png.png 362KB
-
magik remake/WindowsFormsApp2/Resources/imagesssssssssssssssssssssssssssssssssss.png.png 2KB
-
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage.png.png 2KB
-
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage1.png.png 2KB
-
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage2.png.png 2KB
-
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt.png.png 4KB
-
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt1.png.png 4KB
-
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt2.png.png 4KB
-
magik remake/WindowsFormsApp2/Resources/texdt.png.png 1KB
-
magik remake/WindowsFormsApp2/WindowsFormsApp2.csproj6KB
-
magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll.dll 2.1MB
-
magik remake/WindowsFormsApp2/bin/Debug/Siticone.UI.dll.dll 1.3MB
-
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe.exe 536KB
-
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe.config189B
-
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.pdb59KB
-
magik remake/WindowsFormsApp2/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs214B
-
magik remake/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferences.cache1KB
-
magik remake/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache3KB
-
magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll.dll 6KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form1.resources37KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form2.resources34KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form4.resources180B
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Properties.Resources.resources437KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.AssemblyReference.cache11KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.CoreCompileInputs.cache66B
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.FileListAbsolute.txt6KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.GenerateResource.cache1KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe.exe 536KB
-
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.pdb59KB
-
magik remake/WindowsFormsApp2/packages.config147B
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/.signature.p7s11KB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/Guna.UI2.WinForms.2.0.4.6.nupkg.nupkg 6.5MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/LICENSE.txt2KB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/README.md479B
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/icon.png.png 15KB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll.dll 2.1MB
-
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll.dll 2.1MB
magik remake/.vs/WindowsFormsApp2/FileContentIndex/bbcfc6bb-cd18-4b63-9c13-bf9271aa79e7.vsidx
- SHA256 0af1f5a2d0a88c1cf17bf28b9a198385bb153ac0fd557c3e092a283d5b54b0e2
- MD5 95394362f2b14336f7bdf5b9836ff982
- SHA1 b5a0f1a8df87d6292d59722543c4cf32788f41fe
- SHA512 9d77b5053d6a48faf8bfae41c01a0469d513a84c837ba6400f725e4af6e7491c783ef08ac758d6506b93152ff3280212b1a44a578bc9746d073bdb163f5c4661
- SSDEEP 6144:ru+y1Ggt/NeG7Rkv9dLb2U8MEmN6j2PgdWIs17mtaAEKUzxkqAy08AA0vQctKEd/:OMjcUfzHi+ZciB/PROtDr/zb9Ag
- MD5 SHA1 SHA512 SSDEEP
magik remake/.vs/WindowsFormsApp2/FileContentIndex/dd5ae10a-f103-4e06-adf0-26a038b47d16.vsidx
- SHA256 e2c5aa10dea21878151263d01cf64aa6ce3f146ea42c473511b3a35ce6b91205
- MD5 05e7d72df28fce48c84163b2a59ee8aa
- SHA1 3d79db8b37db1d17fedca4e0d34e7b35211f610b
- SHA512 bc171c72fb8074678a1f98f072b615e323abeb6097772f4fb85f9be42d499adc7aa93e0999f8a87736d0ab457d9f310ed37149d8c663c875aca26788789a0176
- MD5 SHA1 SHA512
magik remake/.vs/WindowsFormsApp2/v17/.suo
- SHA256 e443e5919d65a7a64255e7fa38bdb54672f004eae3fcd1854d5651639ed42903
- MD5 65fed96dc5e7ad88586f8f1bac2c5522
- SHA1 656bc123450f26781f783475ebb4b193d07f39cb
- SHA512 386264bcc7bcac81d31e4a68ddb642e5e4164bd221b399de3c906338c4c64ad4627379135ad28b21914c732d6b476fac804cc760b10b806ca0072524498d7c63
- SSDEEP 3072:vZeNSp5NvaQwjSy+aQOjSyy/CjDKHJDKHZ/x5RLzYIuBjQNSS8SIStSGS3SwSaS/:v810QNpmN2
- MD5 SHA1 SHA512 SSDEEP
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.backup.json
- SHA256 541963e6103d86690a79231da8baadb7d6acd7bbaf79ac6b3a98e7e16bf0dcf9
- MD5 5f86e4d4dd6ebeb73c5744c56e83ac67
- SHA1 c0cfa84cd9b8cb8c977370dcef09394934bffe89
- SHA512 ad778e351e1579cdc7ab15da6b8eeaa5d5388d15d17c381205d7441b6f91a77c41caa251dcb8db7b961ab1c6b2c466abb98b2d0f534264cf7c7fe2e5c9d3f685
- SSDEEP 192:MqtqzqRq1q/qHq6qSqTq9qgqWqlqHqHqdB8dW8RHiB8dUuRy1jWdkaRJg3m9dd2J:MqtqzqRq1q/qHq6qSqTq9qgqWqlqHqH8
- MD5 SHA1 SHA512 SSDEEP
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.json
- SHA256 a19eb6e9fabdd3a065965ed125edd27f6b946e57deacb06928f3bae8034a2cec
- MD5 0d1b53b86786a67906d578f48f7f3ead
- SHA1 a4e8566427782c3aa967653bde770ad55ac2769d
- SHA512 5419240b6b149cfbafdf7f233a93ccaeb312f3b5b21c34f86c530c2ce941ce3165475ae860cf23f8439c69a77a0bc9c5b67420ecb1ff5a990145a364f7703d10
- SSDEEP 192:7qkqzqGq1qKq9q8qHqJqWq1qSqwqHqoq6B86YiRHxB86WcRygjW6k9RJgsm96d2W:7qkqzqGq1qKq9q8qHqJqWq1qSqwqHqoq
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2.sln
- SHA256 62c049cd1c60d07dfa578fa339879f4549177185ec280982ce9b7b3b6a1ef761
- MD5 a7aece4ff4cd329e4c45e19566a11105
- SHA1 dcf9b92a1d52af22602d4483143ba3bb0a29e88b
- SHA512 84f42a533e4050eab46944e9c1b809e2731d4dbad851788c070310cf9e79ecab163c032f3313c321dbc5df81ed71632858edbc80054159cf08b298ac0de0fd91
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/.vs/WindowsFormsApp2.csproj.dtbcache.json
- SHA256 1973ec1a36b2f32dead8cb22a35f6a29c5be315eb0fe6ea0262e3f83b1979451
- MD5 5f32ecf83446abb9697ea1d69801cc60
- SHA1 bc9fc5ee25f01d0b1cbe857cb583eec9551661b7
- SHA512 1b4d87ec44ab43fcf34d878c78022d8fa7dc91ea7f1e128753342c9e5db2e2f4cbf0f12de38c4e2109acd8163bfde6988d9f1afb85ee02814bc3cc2eb330ce2a
- SSDEEP 96:XcSsfqqlgzx2bfzxjGXuGY0gGJFGYGEGvG6PGWGc9GfGnG6GoGBGDtU+BxjU+LxC:Xc9y1kxhU+BxjU+LxC
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/App.config
- SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
- MD5 9dbad5517b46f41dbb0d8780b20ab87e
- SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
- SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Form1.Designer.cs
- SHA256 f748b556b1075821833604bf007c0a078e14a3c1c2ab2ea34f2128b735ccc9d6
- MD5 bdafea9c16517a509899412003094ee1
- SHA1 f20f5e073159bdc16115969f1847c2ef46c9ac73
- SHA512 1941df92e2b92d28163452c9d207b851ab4ef03b1903d3ba3b208e5f14ab3b6be202bccb12f1c70e89a8c22c25cf8720e0059401ad7c1d6d2321fefbece5d0bd
- SSDEEP 384:Lmw1zc6SwmDhihX+23GSqVy0sxRT/oYI2FN5jXxV90htFaghX+I2puTODrD50Au7:L51zb0IBc
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Form1.cs
- SHA256 435883b0da8491b182f3e4da128fccd9f8de57414e424c36f0ac2b30e6bee471
- MD5 fd9723a1d80f2f1858869f1d02266d1e
- SHA1 30f6609aabe6b670b8d8e446ae16a3d0f3242902
- SHA512 7f9d99bbf139a1d9ed383b7f85981699a1010ad943fa482af27a0784efa96407143f85153e274df35ad1a11cd6559d6554c4e4df09654348376fafc403536a2b
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Form1.resx
- SHA256 556001018338e04b17f7975f6d501980dda584b649e613145a83f2859d4c0002
- MD5 4ba6d21383af46d6f37e30f5a14d6c85
- SHA1 152b65786d22ff95a9166ad364e49d092ce2f2f2
- SHA512 798ab0cea2bfb5995aea3b5dcc82d690cedab8f8e10f753419cfdb8a07f401d4c54b890071ba374fe077560bce0e23ff4625826e35df2838f3552777e2c45e7c
- SSDEEP 1536:Kj2v6uzC5MiU3/A4pY5MZz1iVDQjbHM3YmffqL6TfrQ/:Kj2V+51U3oqbi2bM3ZCm7+
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Form2.Designer.cs
- SHA256 da0bb1193b6739720cb74b3666577b3ada00f20e8395d917a1a0d390e0080161
- MD5 784a15a7c93dc422b14044158863cb72
- SHA1 81503e5eb1cd4751e6fd63b62efff0076c9317d7
- SHA512 d8013b609aea0deba2e19883430b6e9f95628b90c83a2a9b3f779e1fab2637ce288e1f86cf18a28ab01a2c4997ca115972bbae689e732c180c750ee1c6c0e21a
- SSDEEP 384:Lfw1XSA8qhmKTL3wtAENV9bClM+lW0sxRq/oYIVFN5jXxV90hdFPQf9nKWPTdt2D:L41yBQQWXdT
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Form2.cs
- SHA256 33b09d50655d4ebd62f4b92f71fd9e06717f4c2e61ab379c9d8b6d4ddc8b4d90
- MD5 00347712af0aff05d459c72a00d4c7fb
- SHA1 ad45023d141e76b99e4ebf93b62f44f55097eb69
- SHA512 c24cc3dc26c14ad3e138efb048b1c610c0740767fa375065ad6a5c080ed577c58f71ed30f81faa882e9ff01661361b90cebb62e9f2b369cf4d0ecc362b770846
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Form2.resx
- SHA256 ec9b6b816995beedd9a759d9d936873258cea83114e9617165f5567fb8119037
- MD5 a94ad34991180003e15e5540723973a1
- SHA1 d34b65f9e001a1081d6b50665dc24b64dd16b030
- SHA512 7f8d5e36ab64372c9a4491e46fd9156117cb5cdaac2ac8735c34cc4455b672d1b9bf2c45964d99b6a14cd40a18483c4c4657eed5a05facb4e971aa372c24e004
- SSDEEP 1536:Kj2v6CzC5MiU3/A4pY5MZz1iVdrBbH2aC:Kj2X+51U3oqbi7BbZC
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Form4.Designer.cs
- SHA256 5477e9f5a67c40b139d5c823574fce054b34f7cf6bd72c435f394c4116a53e68
- MD5 5445292d35ee34dc5e1bad6b96ac71c1
- SHA1 0a548e8849d8be6bf7978409db8b3a27f985abd1
- SHA512 805d6e5844f30d6689658bf434f783f2eed3e20017c169f5a4052aeb38b4e555e6bc9973802b384c0b406764092e4fc026f7bd744f7a979d27dc455b0daa4e52
- SSDEEP 384:LFw1f5JV3DdGb9KSqwE+W6GuuQbRSWiU4PGEId+EN5jXeG/h1SHqU4aaRGiiJagE:LK1XO
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Form4.cs
- SHA256 b021baf1cd60a988eabc33a84323f8a7503f0d4df1c8426ac9ce53e15dcb582d
- MD5 cb6f000345b0f5c43ab88a5644dba8f8
- SHA1 9577b20506ae58cc719ba37504f02c1ac1d98dd1
- SHA512 1541a710bf2bb5ebe9183a2cda16dd3fd94c08f8071a37691175174e2763daf8650e297889a467ecdb7e121b6db2285649e4d3a962d191243dfa745f2a325935
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Form4.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Program.cs
- SHA256 deb70710e779e06708bf8ba38666f2f4188ba53d8d709632b0ce619b051f5e39
- MD5 59fb169c1f62b2baa0aa477a6ce516c6
- SHA1 0681e4a9a9e35dbe3e1753123b34b9a66b87060f
- SHA512 8c40fc92b30925172924406be6cf40afb16b2ac7fda1b58856586955b4a2363fe3191563f97f395fb9764f86759d1545b7018d3381882709c4bdd3eff9cb82d9
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Properties/AssemblyInfo.cs
- SHA256 2c806ae47e8acef85173651b0eff4d48b714ecf21538d8c4b3c47fdc64ce112d
- MD5 e385d342d6c2dbcff8c9e9a73e8b643c
- SHA1 59c98a947c53841f8e2544cae36e698f62da55d1
- SHA512 e22f0c20667a2939a1a69816a19468dd283132294be23fd70dca1c5db9010a053cca1ac4d24fc5103982ca1d8e8295931c076b2710f9f6ff0cad47a909242bdc
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Properties/Resources.Designer.cs
- SHA256 163b4ad48ec6b59ee2f6868db89f44192ecd6c31d9c95dde9e689a7c04c07f0a
- MD5 242dba7b47a307312429e2c541f529d3
- SHA1 b183d290da34289476d9b86d9c0e2670eb7b130b
- SHA512 e28149e6f402cdbe355de36026f2ecdc22053d4a9968679f93789667795c98d0ec8160f4af105bb336eb32f2816f14bd3f5b497bd41e6bc87f0477a8ba11ac3d
- SSDEEP 192:qAqeY3M1heHV1e7q63zr6vzr6Tzr6Dzr65zr6fzr67zr63zr6Vzr6B5zr6Omzr6C:qAqQ1he11b63P6vP6TP6DP65P6fP67Pj
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Properties/Resources.resx
- SHA256 44807f2849c3afa25663953edf03983ca51170e5aa66b09318615f0d40f82c5c
- MD5 00803eaf255836568b559f2cf36c81be
- SHA1 1fddb9e5189f5af531ed0f54df03fc76fe080c7d
- SHA512 0e251de18b04ef3599bd0577b5e441613c6ac8daf8910db846270055546f41f261379b58c8d51953098494d7af47e4fa64ca6b345c37f1afdfbd22694451894f
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF8zokwC1okwC/okwCcgokwC/okwCvokwC64okwCxj:KjrbLPxsLvASvKgwyahF8zokwC1okwCN
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Properties/Settings.Designer.cs
- SHA256 7a360e1dfb6bf99aa2cb82486a531c6976cbe05c17827139dcefc83d6b855100
- MD5 8b68a6f1e88d0af5dedff3fd90f5410d
- SHA1 acf4fe7bf3f8e0313afa39ab700b0a4c4fd44fc3
- SHA512 20841f81d1845796a90fff8817de0202cb0cd817dbb8559e9b184a452f22da86617e862c328023ffcca1c50045cc813871fa927c327a979f4ffc47709584d4af
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/close.png
- SHA256 d72ee3e5e2bc9fb65bd3d4ed3399b85de0bfca235b93be9129dd4201f51e0f23
- MD5 3ca2eb1303d679b2abab63e4809c55a5
- SHA1 941e6b4a548b10709cb92de01426ba22300a60bf
- SHA512 68972ba23b6f7f432ce83c4a7bda7bd34014b3ac5a5e0a8b5f2c2ed138602b2a157b6abb01142f102ddf9bded0401a6670d98dce8bf8036664b8bb6623421e88
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/close1.png
- SHA256 d72ee3e5e2bc9fb65bd3d4ed3399b85de0bfca235b93be9129dd4201f51e0f23
- MD5 3ca2eb1303d679b2abab63e4809c55a5
- SHA1 941e6b4a548b10709cb92de01426ba22300a60bf
- SHA512 68972ba23b6f7f432ce83c4a7bda7bd34014b3ac5a5e0a8b5f2c2ed138602b2a157b6abb01142f102ddf9bded0401a6670d98dce8bf8036664b8bb6623421e88
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage.png
- SHA256 63bb3021dfc941acf922f5e6993eb76822f118b5a8c79a73597a526cc96c1675
- MD5 d24220c95a36f0a13f32ae358931e2fd
- SHA1 282ad4c4773515e1f644107e64947c4f62114747
- SHA512 5261deac35d8a51a08d35dbd6ee8d4d22d65976c52b8ec0b3ff062c50d66dbfb70b0a68a640864ed1f45bd892bd41a9b06c5e7f5f68f1f41eb607eb040e9ca88
- SSDEEP 96:8CknmWI4oJHfsJZQKKS78WYjCyVf2w4WBF7Y+rbfRIZL61TqSSLKZQ+:8Ckn8/0zNdyVuw4CdVbRIZLITqPWd
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage.png
- SHA256 75c6d843fa4369964f4d1facebd36fb448b3647ffdb179e7428f28b8d750b408
- MD5 229a7ff80aa9309b0061476e806b4c49
- SHA1 5ab17d9227f82331da657c9ec46e18910d35eb4f
- SHA512 e29f72ca5652b5e4671a05aad942b22cb66829df8b9b354e7312f902579ad45cbfbda76ca8dd67bac6c9e82993050cd2e654e158ca45e94dbd18f7d89008a68f
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaage1.png
- SHA256 75c6d843fa4369964f4d1facebd36fb448b3647ffdb179e7428f28b8d750b408
- MD5 229a7ff80aa9309b0061476e806b4c49
- SHA1 5ab17d9227f82331da657c9ec46e18910d35eb4f
- SHA512 e29f72ca5652b5e4671a05aad942b22cb66829df8b9b354e7312f902579ad45cbfbda76ca8dd67bac6c9e82993050cd2e654e158ca45e94dbd18f7d89008a68f
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imaaaaaaaaaassssss1111111111age.png
- SHA256 b14e2fe110eb404a281590b9094395d90778641952acee43df380210d74cccfa
- MD5 056f191dcd89b523136730c4f70f1ee6
- SHA1 561b3bdd24fb031f94846e06905b11a9fc798251
- SHA512 a6439a5560afdb8fc5c081864e042c83dc697eded826b93e68192461e23d86175c80e45b285628711b8771255666bfcb3befe53a04a0db4082740b2441584e69
- SSDEEP 192:Cts1Blto8pcEHmVPR705T6qx3ALvvLGysXtuhxtNRMuHi5atxQR:Ct2ltSXq1ADvays9uhxKuH1tG
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/imaasdadasdadasdge.png
- SHA256 b1036ec7cebfc92caa51e19d4bd857937b8fd73f90329dc3ac17e156933ee171
- MD5 29e21b0ab0973a424798d96214b2fbc6
- SHA1 2bad40bb2de2f25a7cd1bbc3d1f91c207369ea40
- SHA512 868086e6dc0163ca4bd22b990b23f1e22cd955d0558e3ab6179e01d37dbba35b15b11f87dc11eb7c33749b1bb852d81b07a05c51ca21476ed6bb253dc5f7c0ee
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imag12313123e.png
- SHA256 5efcee41260925ba0065b781787d01ca907ebbd4556618f506d3b4854971ac5a
- MD5 66f1865ed6a40f74eb31353acdec55b2
- SHA1 c23f8b78c5973feb74429581d96643ad43633bb6
- SHA512 eb29bdd5b989830352310c664b349939b54e416fd6179b9ba1d111d124d8854dec301d1fe29b4f909218a0f079e48589497b065d868b0d6d1c1cd4f4fde9b75c
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imagaaaaaaaaaaaaaaaaaaaaaaae.png
- SHA256 6138961eb13b4e61baa874e202d0ff29e3e2f89c5db3123e1273c00843dd63c4
- MD5 c05e902ce020e790731e6b465324bba4
- SHA1 5ad54048098040cc856210858f21ba08f023664d
- SHA512 db3427a948813dae692f0086d27fbad2f4360a4eafe767dab28fcf16a0cebb837a9c8f6c11d8df3e697d04287fee8b8fe4ccc78ce8cce656f7cad774dbccd7af
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/image.png
- SHA256 076d125e42cb7367ac23eb36961f29b6a57fbe4a73c0c689a69f21d8f96845f8
- MD5 31160688ed1e4cc2c384317537d8bf94
- SHA1 420d6ec32491b0cf65c1c120279982730d18514a
- SHA512 f56bf82307303b873b9008afb3a8fdc648b090e39ce0dff0026e4063874db6d3aac8a2def79f68e625b69d3d5425c31de13eee65bf65c19343046d8c2dc8731e
- SSDEEP 6144:M1O8bqZPbmAc4HCIrw/PRZENjJiXbhjjnbO8tL88X9BunmcxQaUmetKArDC+3ddS:Sb+tyAceCI0nRQuVat8XzumHa9etHDbG
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/imagesssssssssssssssssssssssssssssssssss.png
- SHA256 69e2bdddebfb55e23cbba667acb444667be30d4c1296a5a67d1ac2be9767903f
- MD5 4bfadf5fc49c8503cedafdf88cc6bb38
- SHA1 34037879b8b47ea4efa323a80d0a61ba5c248fe0
- SHA512 3af3e8832d5c361dd0fa9a52915cd45462b880f82e64066d259c34202323b1b4fce2268bcfd00214924e93346c6ce5f36851aa694655fb08e560df00573d5d6e
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage.png
- SHA256 8fce1e56ba8e4165a5074428f999829106d3e4987e03efc37acefc25cd23363a
- MD5 6fdec881e983a29b4f514845b2796aaa
- SHA1 00657420bb0358cba0b2e89d4c4448fd97a20125
- SHA512 26f637ac1b480160a6759b9f9e7ea718ee145ff74701732d77fd136a53dafa8f9ee61c860841d94b42313f9a176ed1264f31292c10ad3c08edd84a67e5b731dc
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage1.png
- SHA256 8fce1e56ba8e4165a5074428f999829106d3e4987e03efc37acefc25cd23363a
- MD5 6fdec881e983a29b4f514845b2796aaa
- SHA1 00657420bb0358cba0b2e89d4c4448fd97a20125
- SHA512 26f637ac1b480160a6759b9f9e7ea718ee145ff74701732d77fd136a53dafa8f9ee61c860841d94b42313f9a176ed1264f31292c10ad3c08edd84a67e5b731dc
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/imasssssssssssssssssssssssssssssddddddddddage2.png
- SHA256 8fce1e56ba8e4165a5074428f999829106d3e4987e03efc37acefc25cd23363a
- MD5 6fdec881e983a29b4f514845b2796aaa
- SHA1 00657420bb0358cba0b2e89d4c4448fd97a20125
- SHA512 26f637ac1b480160a6759b9f9e7ea718ee145ff74701732d77fd136a53dafa8f9ee61c860841d94b42313f9a176ed1264f31292c10ad3c08edd84a67e5b731dc
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt.png
- SHA256 abd98226348c7696ed6b676939c409f82a200f851fe2732ba5ff9b91306e7d63
- MD5 239ffa24ecc0047c2158a6cc3e31e283
- SHA1 76788c2747b9af6d37f108f2ee6abe0b90e2afd2
- SHA512 4dd5798cf1d26e9eea4e452b21df2444592cbfb534f56b60f830595944ef016bc5f209de29accfc0fa3b055a4e3035e41a2c75ef2b0e1c8236e1d96ab8ee8c3e
- SSDEEP 96:hllcHitlIxv9vk7C1+I4wWHLihk/xrl2paiePkMfz31QTMSOg5D:CIIHUCD4wapCaPk43UFOg5D
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt1.png
- SHA256 abd98226348c7696ed6b676939c409f82a200f851fe2732ba5ff9b91306e7d63
- MD5 239ffa24ecc0047c2158a6cc3e31e283
- SHA1 76788c2747b9af6d37f108f2ee6abe0b90e2afd2
- SHA512 4dd5798cf1d26e9eea4e452b21df2444592cbfb534f56b60f830595944ef016bc5f209de29accfc0fa3b055a4e3035e41a2c75ef2b0e1c8236e1d96ab8ee8c3e
- SSDEEP 96:hllcHitlIxv9vk7C1+I4wWHLihk/xrl2paiePkMfz31QTMSOg5D:CIIHUCD4wapCaPk43UFOg5D
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/texasssssssssssdt2.png
- SHA256 abd98226348c7696ed6b676939c409f82a200f851fe2732ba5ff9b91306e7d63
- MD5 239ffa24ecc0047c2158a6cc3e31e283
- SHA1 76788c2747b9af6d37f108f2ee6abe0b90e2afd2
- SHA512 4dd5798cf1d26e9eea4e452b21df2444592cbfb534f56b60f830595944ef016bc5f209de29accfc0fa3b055a4e3035e41a2c75ef2b0e1c8236e1d96ab8ee8c3e
- SSDEEP 96:hllcHitlIxv9vk7C1+I4wWHLihk/xrl2paiePkMfz31QTMSOg5D:CIIHUCD4wapCaPk43UFOg5D
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/Resources/texdt.png
- SHA256 c66029ea870223f2e45e15a3409fa3e49b81c96bdf293f4da2ac31f12fd95852
- MD5 bba0c4a7e515533c2204509e8464e446
- SHA1 3d6e74e23cad9662670280b67f914952d44a5502
- SHA512 b4c33a224aef596a74f357a5dde8caecc927d735b08c77942335b39207038920978dd889b4b78d7fa9268d646b7cd6232e1b75250b06d128c6527a73e435c822
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/WindowsFormsApp2.csproj
- SHA256 2325478c79234626d66776a000e07f5eb2e8f037cc6ff51ce254d1b7b2d4ef29
- MD5 39cf74332f4ee26c84aa98ae22d69c57
- SHA1 e2b63eeba6068673bd6853f5b94f8d5255840449
- SHA512 1569065efa46c313c2d39097fbdc2fc331ab7f193478a99d2d40da94c76ac67b0152c7694bbb2a183b58b1e66e2897a1b6ec58a301bc8d85081fc06f4cf8e06a
- SSDEEP 96:7YWnpu5eIADyzcsxxa4G7DqE5vYNIBCHMOdsHVSw2HCWs:7WlADyeRF
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
- MD5 c19e9e6a4bc1b668d19505a0437e7f7e
- SHA1 73be712aef4baa6e9dabfc237b5c039f62a847fa
- SHA512 b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
- SSDEEP 49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2159838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/WindowsFormsApp2/bin/Debug/Siticone.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27c56a28cbde094157206da1bfcd7a395111ab97b8a5ff600b11c2175dcefb26
- MD5 750c58af2e56b6addecffcf152520ab8
- SHA1 14995e7f1d12498606d9d209d78d55fe6fd87802
- SHA512 2179790e23f61b3dfea828457f8609279c70b1e071cddc73b1dbda02caa664e0aae2553fc24a4956f9e89c477d66b1a704bde26fa23bc6db26c19e18db00abb5
- SSDEEP 24576:QVMCtIZJntOFmMlMqPilaiS4Yr6ugPngPfjv9tLF2cH8gb:u8NlaVeuHFb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:8f:92:bf:68:07:1b:a4:18:d3:f6:b4:4e:02:5a:2c:51:c0:51:c0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Siticone Technology
Chains
Mar 24, 2020
Subject
CN=Siticone Technology
Serial Number
3a:93:0b:19:8f:29:72:9a:49:b0:8b:f3:6d:f8:17:ae
Issuer
CN=Siticone Root CA
Timespan
Feb 5, 2020 - Oct 22, 2030
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
4
Entry point
1344742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Siticone.UI\Build\Release\Siticone.UI.WinForms\Siticone.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4b0392d390904abdd3f4956e6da7639329cc272df6898d58816a52347e434321
- MD5 f88ea789c822a82e5f566cd65316b5a6
- SHA1 53fb60d98bc2ad5768917e97f640a585c292ff84
- SHA512 af8207482192786d2108a48038fca56fce0fb62694ebe8c4fe7b19224d98f7057833222e8f58a8e4af596f4e1bd60bb84501d045209561b542412cb32f22ea7b
- SSDEEP 12288:letpme4Kz473/3cawyhgy8AzQB98PfjOA:ED6Y47PMmtqxA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
554002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Windows.old.000\Users\mystizal\remakes\magik remake\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb
mscoree
_CorExeMain
Name
.text
Size
533KB
Virtual Size
533KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe.config
- SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
- MD5 9dbad5517b46f41dbb0d8780b20ab87e
- SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
- SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.pdb
- SHA256 4236ee3ee084c131d7ba049852da8229cca3ede5f1a872369848efb01f88b967
- MD5 62fe581f1f1b72ea7658a08899c44286
- SHA1 9b00d9df36ad815b97209a871eab40ae37b610d6
- SHA512 bf49895cb35cd51a264fdeb2b17018612505b6dbb8c6c2efecf113dadff1fbd9066f4f43369f5e144c134916fd4763003b31a53826fbf0d2763791fcef82a292
- SSDEEP 1536:iLPXt3hh3zhMlkArPeQprP94nfttR24NoV/IZyobDFl/ftta2AcoV/IZyYDNo:iLPXt3hh3zh5QFPcfttR24NoV/IZyobe
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
- SHA256 621199557e90fb1661e401cc9a973163c850b4b7e65bbc8d100f67f6699eef70
- MD5 896ab120ac6b6af2895fdb71c452b9d3
- SHA1 eb545ccd7a1bafcdf31ad0f32c09ac505744aa39
- SHA512 834f53444444cee5c348da44674a2b8e6ce51f21a7565a23629001a5c535533c78a4dff8663176d982bab24f0dd272868cfc5c2fadeccc9b97a14f6946766dee
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferences.cache
- SHA256 2afde2de72acfa1a6a3fcc99268ca49ea740b523cc100546951ca9ec047dd130
- MD5 52a9f034a5cd83e5ea386803d6f57b96
- SHA1 cc82cdb024edc68fc378b0bc4e139be2dee97da3
- SHA512 10b28843fa0cfcae95a6c2c3f708604f129a0071fb5a970f658a46977b0e5662babe26b5ba276d7fb132c7bdd0a8aab1fdd11a6614940bf6e8ac83ff27d033d1
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
- SHA256 08efd25430dd7567c66ca9c520c41264bdf5e02d2562ca95940cbdc8b440eb65
- MD5 fcfc080bb8074242dc0fed7d8c3df4d1
- SHA1 041ff06d650db2e5b353dc77d45e0be44997583d
- SHA512 bc43d650497e1c8f201c13c2ebeb653d78da8e442db1088f56c32a8ac3cd58c893ee82b12eae2a23e0f588983af91e8e8ce5041faa21dd47f58eb1eaf73ecb82
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41f7c8d5a9186b12413bbe44d5e4ed01d2c239642d87c7df3cdccc403d3e6bbc
- MD5 a255161777622025b92f2dd2cf13cf59
- SHA1 382bcf412c1dd7f593f2f46a25e483e288e4bcf6
- SHA512 2ee9dd363efc39e7abe321690d8c800b3cc45c6bfe469bb3664272ebd4bd2bb7cc6eea9ab62a6b4c962a6848f72232db387301a17eaa41653698e43f0d44c74a
- SSDEEP 48:6YmL6a6Zv72SqMREhBslOmMZcHOdB37w/CrdSVlTkvqVIZjT9GJDfm+4HH1Zi3Lm:Ixo7zqqe/9w6gidb+4nXWLMjjjuwop
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form1.resources
- SHA256 5ecbb27b3cebee1db04fffc1bc615e66891a1e5e82498fd8ce816bd9a8ef2e55
- MD5 1f56e9e9579845bba1360324a464aa59
- SHA1 d077fd6732660ebea3d82010be86bf31d6af529a
- SHA512 0071648b1d5e5866397a52c3896fe06bf4e2e31141e367e9634ff9fd42ed1c38fa185d20853f47a54413d2ccf45a4b327db4807e0716d085b37bf6719848b752
- SSDEEP 768:DOVrsAm9gMhi0l2L8pl18XFU4BuePaoYoaDTzKKgcX6p+em9YVak:4YZ/w4prygsac7hQ68pk
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form2.resources
- SHA256 0cbc123a0331eea6c61d1ea07a1783bc02b5a94c2bd44652f9d3711bf11030f3
- MD5 f1685abab3bc7609dbd86d2adf2284a8
- SHA1 a16248a6dc892d35263261fc6119d48aaa86e5b3
- SHA512 25012510bb45e65c092de19a97af5d453b74ed8e5b649e3f65d6d7e607fcd5039db0e4a7fe2ce4aeb23dca21163d73397608002d58cdb268f512e642c5926c4f
- SSDEEP 768:ksVrsAm9gMhvCUfL3Ey8XFU4BuePaoYoaDTzKKgcX6p+em9YVak:hYZvCCL3Rygsac7hQ68pk
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form4.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Properties.Resources.resources
- SHA256 a97b49f39c415e73f59ba479f409120816729bbb457bba4cb08ab69eb5c22029
- MD5 807831d9000657aa1fff38bf86a130cc
- SHA1 f4e3fe5bb218551179de4121e2add60db39ad44b
- SHA512 407598d2f6a848f96050266ea534874696622e11174e48abf33fd7bb4816b965e7ffdc7c98e890e32ee1223073bf73e600832a5a03bcd7b51ccd2bd74344eff4
- SSDEEP 6144:lZ4cyL8IL6ZE14Doq3/3coFEwaPqfvhiCGhPQHhiA5Ju8FXO2kNk1y8Umfj8LA9:Mz473/3cawyhgy8AzQB98PfjOA9
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.AssemblyReference.cache
- SHA256 587966658a9752e8b1f27ae3b14b6202e22326a696d862f393be722fee470478
- MD5 3ce4b207468e23dfa5a54d2f41b0ff74
- SHA1 5d6c9ae3a52673c2b403dca846046914fe384f3d
- SHA512 9607bdf92f0460c2f1621da8049b85a901195b49f4099338d1ef149e2c40d960568f788d9749443c50596cfa34c1878ea1b0c039c1c9901f4d3152c8f577fff0
- SSDEEP 192:yHOA8xhz/pZXQVbpYm586tpGIsbi5sU552xlxbarkCq5oplQ2P1CW:yHOA8X/pZXQVbpYm586tpGIsbi5sU55f
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.CoreCompileInputs.cache
- SHA256 56b009cea6f256700d759f4e695ffd47f9883c5512c25c5aab2f5feeb5aba57c
- MD5 e9cda3f3143536d438a38d4e097a9bea
- SHA1 5cc017dd303dca3483138ea31fb9b64803b52043
- SHA512 b229654768353c6ba4e8aee10147b41557875653d3468c618f4c39855c4622e82b1b1fa07f3cbd6537d709272eb5173b2deff9def9dea63ee7306a47a5f8063e
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.FileListAbsolute.txt
- SHA256 2397911360d139dfb66d4577b21d0439cfca3df4ba2d4dbc58b4584db20fdcbe
- MD5 75d7c750b61bf2d3b0be1f88e622f36f
- SHA1 a45159a82990c5266cefa754f8f3bf3fee6d90f9
- SHA512 89cad9568cf42f4957f4d077c7871884f2084d611193c1d2e3d8c79ea0497c751326bdb84c31042d58238f08db5e7299792d932fa8987b74209f1c88c4a55741
- SSDEEP 192:oySUFSUhSULSrSEbSE3SEYSE7SE59SgSEhSELSASE4U1UhUvqE/ErE4ECEfE5tKU:oySUFSUhSULSrSEbSE3SEYSE7SE59Sgc
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.GenerateResource.cache
- SHA256 e8575c055452aece458dbd483330c59067f61703db0d8c72fd7ac144354d7857
- MD5 83b79c6f30829ff8333af4e90f3eb12e
- SHA1 8f253ba64797bfe46b99c137a389236cb749cfba
- SHA512 a3dd4b3ee2a3b5d4fb09e682712407f20c8226c9c92f9329a1a96c14ab859f7c8f5259dbb7e17092e7f4c555d1734504ae09817fb83fb3ed01f6b17d24a62cf2
- MD5 SHA1 SHA512
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4b0392d390904abdd3f4956e6da7639329cc272df6898d58816a52347e434321
- MD5 f88ea789c822a82e5f566cd65316b5a6
- SHA1 53fb60d98bc2ad5768917e97f640a585c292ff84
- SHA512 af8207482192786d2108a48038fca56fce0fb62694ebe8c4fe7b19224d98f7057833222e8f58a8e4af596f4e1bd60bb84501d045209561b542412cb32f22ea7b
- SSDEEP 12288:letpme4Kz473/3cawyhgy8AzQB98PfjOA:ED6Y47PMmtqxA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
554002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Windows.old.000\Users\mystizal\remakes\magik remake\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb
mscoree
_CorExeMain
Name
.text
Size
533KB
Virtual Size
533KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.pdb
- SHA256 4236ee3ee084c131d7ba049852da8229cca3ede5f1a872369848efb01f88b967
- MD5 62fe581f1f1b72ea7658a08899c44286
- SHA1 9b00d9df36ad815b97209a871eab40ae37b610d6
- SHA512 bf49895cb35cd51a264fdeb2b17018612505b6dbb8c6c2efecf113dadff1fbd9066f4f43369f5e144c134916fd4763003b31a53826fbf0d2763791fcef82a292
- SSDEEP 1536:iLPXt3hh3zhMlkArPeQprP94nfttR24NoV/IZyobDFl/ftta2AcoV/IZyYDNo:iLPXt3hh3zh5QFPcfttR24NoV/IZyobe
- MD5 SHA1 SHA512 SSDEEP
magik remake/WindowsFormsApp2/packages.config
- SHA256 437845ca2726a866a93696f91c72c145ca1c3e8090783e6fd390c6ac7a3841c8
- MD5 f0d89f1fb26283f231198514afa62fde
- SHA1 5cfd198de764cd7534d6d4e9fabab33e7bd17222
- SHA512 6283c695d983ad5fa8d26039ee267a1d5180c9521ca44145c36c1e02f83aab5f97ffadee77b17f05d5e7fbc94ec6e56e0501688e82379dcee5ec2203bd411bf1
- MD5 SHA1 SHA512
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/.signature.p7s
- SHA256 9ab59a5c8c6b97e3752f38a387462a66b4485b816489ec5d085a1d505857cda7
- MD5 27cac781ddf53fb27c4be53fc65f1236
- SHA1 5b4f21a271328d70fe7397bacfbfccdc48d9cf41
- SHA512 18186b4bf751bb409a74ff12683c4ca63b9119a6b2c79eb358c027445c0c71b1bb00d617451be4501a0ad0893310aea474692691ab35535a6ea0cbcea4e79086
- SSDEEP 192:GdeV7x0KDWpHiX1x3i1BxHB7x02Nyby2sE9jBF3A5K+o+fadQXLT:iwvDG6w1Bx7JNyb8E9VF3AM+o+idQXLT
- MD5 SHA1 SHA512 SSDEEP
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/Guna.UI2.WinForms.2.0.4.6.nupkg
- SHA256 81c61bd03bcaa7e1fcca772355de5ff35f4969e0b88d7be50edfdfb75ebb0f74
- MD5 40e0a27eff1e7925c84eaabda9afdf91
- SHA1 510a963316010112cf3defebf974a264d0ee9e81
- SHA512 f46e5568507654f382a3871d6677d59d75369cc6837235b8c7cfd5b1e396bba409d9ab1348bfdb138ed275c566278a2bdfdfdb41988b112f40d595955fcfe6dd
- SSDEEP 196608:+yXubt+qSlcM2Uj1jBHYrKHEyUnJfgrkPUCWG27E+OY:+84Slc9UpBYAEygJfgraUHLmY
- MD5 SHA1 SHA512 SSDEEP
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/LICENSE.txt
- SHA256 0023049ed529b24347715ed91144083e5fc29dbd5b884e8966c1c58efc62e697
- MD5 825680b93435ef1dda4c2b7c3646565e
- SHA1 46a19d9ec4215afbcd3312c158c0d85022ffdaf4
- SHA512 78da597f5a1d6ca93f52a0115ab7f5c036cc6cf9420b36ca2322f8c4fcdc101955b136f38997005c35a0afb2c5c22799b3c5c3fcbfa50d5e272ac88b1adc1e3e
- MD5 SHA1 SHA512
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/README.md
- SHA256 73d2d632f59c019455847aeabeb58db0634f2a3b293501c6f37ec459e13a65e5
- MD5 d1ebdf6792480c422e23baee523c018d
- SHA1 2f248e3c51ca95faa1ffec47c6c3a92905743092
- SHA512 5874db6a3dec0d3674581a68dcb123c0a95f203081dcb7bc66ee8bf59f457ca409e6378a53efefff414a06fbfc181ae7142e58e112c7d3c7b6a57edf66b3bd46
- MD5 SHA1 SHA512
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/icon.png
- SHA256 853fe905d0476b8b2acc891d71a59e742257dd003e234700dea893d37af44bc1
- MD5 1804931f288b48c3e03f326578eab93a
- SHA1 ac5607f8f1a2ed2b0d132ad3e64ec284e1c679b0
- SHA512 c9b67eba64f808d104a4e3311e977927a3b404e239851b36a232a86a681c73cdb9e55da6b49c3008ed0194fe1bd30cb0cfb9402b85983b446d4b161267695e20
- SSDEEP 384:BXE05SyFwGWNeh8V2LyhS60s2snaRpur8h9+NUpaviqqr:t35TwnEehS60sLncpuA+KciqU
- MD5 SHA1 SHA512 SSDEEP
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a641ea243f6e8943cbad387e5730d9eb92ce4bcfd5d9d096a547927503e755e
- MD5 70bbce41447ba33a3c7e8dc99d3e6175
- SHA1 295ca6d304dbe2532b4ff27e283834ded38d78ef
- SHA512 6ef6f383a2623ba16dba08fb31afd4e980981886653737274df84e5ffde322f560d1ffe71edd0829ea24461c5ea488bb92be751019b44c921bd919207e5fcdd2
- SSDEEP 49152:HJE3dj2ZfrOQJarXvIwWQY6zlP46ATdeedHvYTKv1tZJCh+ajdV0n2w4FN:2dj2ZPY
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
04:4c:4e:d1:37:8d:d5:46:2c:19:17:31:96:91:84:58:48:c3:2c:75
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2152782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 163a2aa94061d1ed03c19c41d9f18e0cbae3a8f71fe78a46ef332e5df39c8da5
- MD5 df5dd00bfa6f9b477cbd59cbddb75a00
- SHA1 efc2b30aa830444fa5159ff8df187a8e7b5b6ab5
- SHA512 3d8405eef2f19e40358ed91069c295911f67aeaff7a440b98e01a9799e485526db9788aaed99e5e046c6755aa075b6de9a0991f99f553a3edf334748a77adf10
- SSDEEP 49152:1BGZRDJCizd4UwKGU2pFumG5sx9YzhJY+9O5L9uuKOHHT58agrj7fsfnbDF17F3A:zmC17Fw
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
36:bf:45:fa:78:df:d7:c8:c8:94:09:9c:fd:ee:f4:ba:f4:a5:5a:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2154990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3f560939287a7f7ad6458a16e11b735de3c5dc84e1f656db213685d36b4af74
- MD5 c45dc8507846b8c233e13392da0927d4
- SHA1 72565751c84fa66106a418ffbbb10b5cba1be8b9
- SHA512 a1d47eee6e6e59ac9f5b1637548a611861b80e5b5c98cfabda787a35c404c323c78b4a7460a06605b7e3f30145cb0410862b937bac49ad4f4ca80d3cbb35567e
- SSDEEP 49152:4KoOW5m269ypJMKS+yU85icqpQEgRjmuaNJMKYKLHJVpW/gyW1vV5aV1LLa03Pwp:4KnC13v
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
c2:0e:55:84:9b:c5:72:cb:69:8f:68:a9:20:ff:5d:89:d2:ab:e1:f0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2149358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
- MD5 c19e9e6a4bc1b668d19505a0437e7f7e
- SHA1 73be712aef4baa6e9dabfc237b5c039f62a847fa
- SHA512 b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
- SSDEEP 49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2159838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd
- MD5 c97f23b52087cfa97985f784ea83498f
- SHA1 d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89
- SHA512 ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512
- SSDEEP 49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2151934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cad8bb34cf070c10e995ebdb60d9d1b4e206bc763183a8cdfb29e17ffa30dd10
- MD5 fc5aba3c395c5f9098cb8e2f78e17022
- SHA1 217061a89757a1d6eb976ad48fb9c93a7a58edcb
- SHA512 148b275edaccd403ee7dcb70e959b29a22ed1c5f61b674afb94af6e9e6b010bb0a7dd9e964d2811dff9c2642a49bb278cc1a838a4f384f5648470187ee83936d
- SSDEEP 49152:YTTFBySg6etzcwp8fB0hXGErGn9lut4XrgF0:irG8farRo
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
fc:f1:4f:80:29:85:d5:17:61:00:50:90:0b:29:ff:b3:2a:f2:5b:54
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2225806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ac70532408b89159bfe235d4ed228faa03ae3fbd63ec6a82d895f287a3b0579
- MD5 b429ae86c5be521bc8ca3b164cec3acb
- SHA1 387560073ff5a1f2191abc6f75fc34532bbb6dd2
- SHA512 eae65de53da50708983ed8ebf9e1e3dd5f9aea95a354d272e199bb59517f62bfe35f0df7a37d81ab0423d0d6d29304fa70284c731bd54023e446b2c19bacafb1
- SSDEEP 24576:DgWuftU4WrNOA6sM6kXxMfNmnjk/c5NrH0UUoo2QkJXVSItH5ppoO0KzJ6nFwHQL:DA+NOpXm1mnj0cP+DkhMAiawnFV
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2226574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc2facf8e28798226555acbc3b8fb252b7d44b971ca05563b22fa000fde1eb79
- MD5 1ada83c7155d1c9e302af110b0024f70
- SHA1 9574d6eea4d576fbc9bdcd3eb86dfa3b421fe05e
- SHA512 8236a3c14ca2960fffbf34ac9f1385426e2fde03de4028ce7674855f6f72dc35b1cf71e42fbf53799fe23584d4f6aff6760cbd39c921dd9253f36c69810db53d
- SSDEEP 49152:sIMHP3dPYHRRagQ8fajJa0qRefV9J7r1V6TPKHnFnh2k6J/E:M18s7rv
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
da:64:a2:0a:83:46:13:2a:3f:2d:3b:35:18:ee:e3:2c:51:50:99:c1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2224222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ