General

  • Target
    190119
  • Size 211KB
  • Sample260427-pse1taev6p
  • SHA256 2128894452f6d7f9ffb283840cda677497acfec2d8d0e6b78f029b4b0c41c6e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 190119
    .exe 211KB

190119

  • IMPHASH 5a4fdc24c4368dd9db7d335bc6a0bdbb
  • SHA256 2128894452f6d7f9ffb283840cda677497acfec2d8d0e6b78f029b4b0c41c6e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
c2:32:67:30:b5:cf:88:ac:02:f5:0a:9d:57:25:98:71:66:94:3c:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Marketing,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Minor OS version
0
Major OS version
5
Entry point
4770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\build\ob\bora-1022478\bora\build\release\integrity\sysimage\ufad\main\vmware-updatemgr.pdb