General

  • Target
    Zxl.dll
  • Size 9.1MB
  • Sample250925-vdlspsswft
  • SHA256 eff58417f4045e41257e9fa64d2d34431dc80e1d2f40ddae4a61d95a75b73b71
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • Zxl.dll
    .dll 9.1MB

Zxl.dll

  • IMPHASH 90ad2364f9a8390548bd0f3054022715
  • SHA256 eff58417f4045e41257e9fa64d2d34431dc80e1d2f40ddae4a61d95a75b73b71
  • MD5 SHA1 SHA512 SSDEEP
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
a6:bc:9e:af:39:e0:d6:2a:7d:7f:67:ae:fb:78:d5:ed:4b:7f:6d:1a
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=49437381,CN=ZONER software\, a.s.,OU=Software development,O=ZONER software\, a.s.,L=Brno,ST=Brno,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
Minor OS version
0
Major OS version
6
Entry point
7498928
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
C:\Projects\Version 18\Binary\ReleaseWin32\Zxl.pdb