General

  • Target
    881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
  • Size 802KB
  • Sample241121-yl6dvswkey
  • SHA256 881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
    .exe 802KB

881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
b4:96:71:f4:2d:1c:93:da:fc:51:04:d3:64:e1:a3:17:cd:bc:42:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Pantum,O=Pantum
Chains

Mar 1, 2022

Minor OS version
0
Major OS version
4
Entry point
811474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\A\_work\974\s\artifacts\NuGet.LibraryModel\16.0\obj\release\net472\NuGet.LibraryModel.pdb