Overview

overview

7

Static

static

5

11.13.exe

windows10-2004-x64

7

11.13.exe

windows11-21h2-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    11.13.exe
  • Size 107KB
  • Sample260313-e27gbahs6z
  • SHA256 9eb046674e605fed5a99e6300c4a4e0bfc9470c4f31b2efebb57932b19e90886
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 11.13.exe
    .exe 107KB

11.13.exe

  • IMPHASH 5d3c0b627d0f2032f4e6d13576e621b5
  • SHA256 9eb046674e605fed5a99e6300c4a4e0bfc9470c4f31b2efebb57932b19e90886
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx64arch:x64

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
d6:42:dc:39:de:6a:45:84:3f:36:d8:f9:68:bc:16:f9:e9:eb:0e:ac:f6:65:a3:c4:5c:4c:d8:2a:8b:53:9a:7e
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
2
Major OS version
5
Entry point
44556
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Build\Server\Server2010\x64\Release\UServer.pdb