General

  • Target
    kosdko0.exe
  • Size 2.2MB
  • Sample250809-dh7sasfr2s
  • SHA256 f3e028476e8eba6b4d210dd1757a1f94c320e2e1c7194d5f449cf9fdb01a4ce9
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • kosdko0.exe
    .exe 2.2MB

kosdko0.exe

  • IMPHASH d42595b695fc008ef2c56aabd8efd68e
  • SHA256 f3e028476e8eba6b4d210dd1757a1f94c320e2e1c7194d5f449cf9fdb01a4ce9
  • MD5 SHA1 SHA512 SSDEEP
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
4d:70:88:d1:8e:7c:09:e3:5d:67:39:bf:ff:1a:6e:b9:de:e7:3e:d3
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Winamp SA,O=Winamp SA,L=Bruxelles,C=BE
Minor OS version
1
Major OS version
6
Entry point
448864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths