General

  • Target
    pesda0YqPL3.exe
  • Size 5.2MB
  • Sample251114-wb4feavlas
  • SHA256 fce8baabee544ce0b1c14404b1eb0b84d1ec63d50636d3b598b265ce967e275c
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • pesda0YqPL3.exe
    .exe 5.2MB

pesda0YqPL3.exe

  • IMPHASH d42595b695fc008ef2c56aabd8efd68e
  • SHA256 fce8baabee544ce0b1c14404b1eb0b84d1ec63d50636d3b598b265ce967e275c
  • MD5 SHA1 SHA512 SSDEEP
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
2d:fa:c5:c7:2b:ee:0b:00:9d:26:eb:65:49:73:9a:4f:bb:97:3f:c5:ff:9e:a2:b4:86:e6:e8:85:99:da:5f:fa
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=HTC Corp.,O=HTC Corp.,L=New Taipei City,C=TW

PE Signature issue

Digest
3f:dc:15:96:f0:67:13:17:10:e7:12:3b:09:14:ac:21:b6:5a:6d:75
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=HTC Corp.,O=HTC Corp.,L=New Taipei City,C=TW
Minor OS version
1
Major OS version
6
Entry point
434432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths