General

  • Target
    Trojan.Hooker.ATA_virussign.com_78e6638c1efebd6dbd0968d112f8e43e.exe
  • Size 6.3MB
  • Sample240907-pmhjravclc
  • SHA256 e40e040b7604a94d6f9db5175e1a1cc4eb762c035c90ba49f952e723a9c8258a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • Trojan.Hooker.ATA_virussign.com_78e6638c1efebd6dbd0968d112f8e43e.exe
    .exe 6.3MB

Trojan.Hooker.ATA_virussign.com_78e6638c1efebd6dbd0968d112f8e43e.exe

  • IMPHASH 88ba4820f2d988b7dd9d9a4e95060122
  • SHA256 e40e040b7604a94d6f9db5175e1a1cc4eb762c035c90ba49f952e723a9c8258a
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
2b:89:68:03:69:be:4a:15:47:4f:ac:20:02:85:ba:c4:e3:4d:aa:3a
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,POSTALCODE=94110,STREET=\#202+STREET=3388 17th St,L=San Francisco,ST=CA,C=US
Chains

Oct 19, 2014

Minor OS version
1
Major OS version
5
Entry point
2484670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\kkowalczyk\src\sumatrapdf30\obj-rel\SumatraPDF.pdb