General

  • Target
    bac00be71feb7f3f3091eb54d53771e21eee2c422f148e8524bb09e1827e2b70.exe
  • Size 867KB
  • Sample251208-tfbvvaen5x
  • SHA256 bac00be71feb7f3f3091eb54d53771e21eee2c422f148e8524bb09e1827e2b70
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • bac00be71feb7f3f3091eb54d53771e21eee2c422f148e8524bb09e1827e2b70.exe
    .exe 867KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • Adicity.boa
    96KB
  • Beziques161.Mor
    38KB
  • Cogovernor.Hea
    194KB
  • Dobbs206.ini
    630B
  • Fngselsvseners1.spr
    198KB
  • Gaussfunktionernes232.txt
    410B
  • Geriatrics.eme
    105KB
  • Indgravningers/Maksimumsstraffene146.sto
    189KB
  • Indgravningers/Motiverende.txt
    332B
  • Indgravningers/Pakprotector.pac
    639KB
  • Indgravningers/Pochote.kys
    133KB
  • Indgravningers/Similary.txt
    426B
  • Indgravningers/Sphaerocarpus.txt
    475B
  • Indgravningers/amsonia.txt
    288B
  • Indgravningers/anisotropic.ini
    588B
  • Indgravningers/envined.unf
    408KB
  • Indgravningers/fnikere.dis
    808KB
  • Indgravningers/gratineredes.bla
    784KB
  • Indgravningers/grillbar.and
    431KB
  • Indgravningers/gstelrervirksomheder.txt
    648B
  • Stvningsmdet/misprizer.txt
    425B
  • Stvningsmdet/naturlighedens.ini
    616B
  • Uninstructiveness/ordrebeholdningernes.stu
    560KB
  • Uninstructiveness/pantelegens.txt
    146B
  • Uninstructiveness/redressive.ecc
    174KB
  • Uninstructiveness/schmelzes.omd
    588KB
  • Uninstructiveness/tritheist.jpg
    .jpg 3KB
  • Uninstructiveness/tuberousness.eks
    481KB

bac00be71feb7f3f3091eb54d53771e21eee2c422f148e8524bb09e1827e2b70.exe

  • IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
  • SHA256 bac00be71feb7f3f3091eb54d53771e21eee2c422f148e8524bb09e1827e2b70
  • MD5 SHA1 SHA512 SSDEEP
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
0
Major OS version
4
Entry point
13509
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths