General

  • Target
    b8ef9fc0708cfb31debb45d23f2a583d28a4e10d3ec738efc95261f186b3322b
  • Size 562KB
  • Sample240908-sve1datbnr
  • SHA256 b8ef9fc0708cfb31debb45d23f2a583d28a4e10d3ec738efc95261f186b3322b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • b8ef9fc0708cfb31debb45d23f2a583d28a4e10d3ec738efc95261f186b3322b
    .exe 562KB

b8ef9fc0708cfb31debb45d23f2a583d28a4e10d3ec738efc95261f186b3322b

  • IMPHASH 416333ed07e4ed6742e90b5c6a8f2c8d
  • SHA256 b8ef9fc0708cfb31debb45d23f2a583d28a4e10d3ec738efc95261f186b3322b
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
9b:92:bf:ca:d0:78:57:27:22:7b:48:37:bc:71:38:27:ad:3b:1e:61:54:ff:d5:cc:09:6e:80:dd:80:9c:75:47
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91540195754285145H,CN=Wondershare Technology Group Co.\,Ltd,O=Wondershare Technology Group Co.\,Ltd,L=拉萨市,ST=西藏自治区,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c0fe8a5bfe8978fe887aae6b2bbe58cba,1.3.6.1.4.1.311.60.2.1.3=#1302434e

PE Signature issue

Digest
10:8c:dd:44:30:ca:c6:37:79:36:31:ef:0d:44:c7:58:99:fd:0b:e3
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91540195754285145H,CN=Wondershare Technology Group Co.\,Ltd,O=Wondershare Technology Group Co.\,Ltd,L=拉萨市,ST=西藏自治区,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c0fe8a5bfe8978fe887aae6b2bbe58cba,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
1
Major OS version
5
Entry point
85633
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\devops_yanfa\agent\workspace\p-96bb3f2b49c74bc5aeaa662a22f5b07a\src\ModuleUpgrade\SharpUpgrade\Release\InstallAssistService.pdb