2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d.exe
Size 2.3MB
Sample260525-ntdnpsew7n
SHA256 2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d
MD5 22656fc642b88a8b56432a183c0d8b02
SHA1 19b816db4bbcbf7ff42ddf3ced62d62629823cbe
SHA512 714811300489d9dd3bb4f4c2702da2f8284c1429da724d0f0f289e4efb69fb0bfd734f8a45ba46944878d8c82db9aa0bf7ef0a0a4885ef42cb63eeecd5663dc6
SSDEEP 24576:846WFHRuw8xyYQchzmqLFi47YAkLxa+v9UP3vP5WqZ9cAcaWj9s/NBele5yK2Cx4:84VHR98wchyq5l7YLgwWZjzcTaSXkDq
TLSH
T194B59E4A6C9008FAD4AA93328CB61291BB71BC490F3267D72E60B67C3FB67D49D75704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d.exe

File Explorer

2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d.exe

.exe 2.3MB

2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d
MD5 22656fc642b88a8b56432a183c0d8b02
SHA1 19b816db4bbcbf7ff42ddf3ced62d62629823cbe
SHA512 714811300489d9dd3bb4f4c2702da2f8284c1429da724d0f0f289e4efb69fb0bfd734f8a45ba46944878d8c82db9aa0bf7ef0a0a4885ef42cb63eeecd5663dc6
SSDEEP 24576:846WFHRuw8xyYQchzmqLFi47YAkLxa+v9UP3vP5WqZ9cAcaWj9s/NBele5yK2Cx4:84VHR98wchyq5l7YLgwWZjzcTaSXkDq
TLSH
T194B59E4A6C9008FAD4AA93328CB61291BB71BC490F3267D72E60B67C3FB67D49D75704
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

53:31:cb:2b:48:1f:35:a3:61:22:3f:45:48:70:6d:8f:56:13:66:29

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=www.sjabr.org

Chains

May 20, 2026

CN=www.sjabr.org

Minor OS version

Major OS version

Entry point

463360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

554KB

Virtual Size

553KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

39KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2855fd7afac5c9958ec6cb605984a150844bd400dcf69799012f49ad32474d2d.exe

PE Signature issue

kernel32

generic