General

  • Target
    CustomDllSurrogate.x32.exe
  • Size 1.0MB
  • Sample260528-jrf9labv8x
  • SHA256 e3ce2dd501511f2125d0057e93f9f011172564ef1f5204b81278d85f44ddc385
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • CustomDllSurrogate.x32.exe
    .exe 1.0MB

CustomDllSurrogate.x32.exe

  • IMPHASH c380c9a47a6f08ad32859a6a56459e6f
  • SHA256 e3ce2dd501511f2125d0057e93f9f011172564ef1f5204b81278d85f44ddc385
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:65:a2:42:8f:06:51:7f:bd:3e:28:95:00:60:15:50:b8:c0:3b:34:eb:67:4a:12:cf:d9:34:16:b4:96:50:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=615 979 765,CN=Outbyte Computing Pty Ltd,O=Outbyte Computing Pty Ltd,L=Sydney,ST=New South Wales,C=AU,1.3.6.1.4.1.311.60.2.1.3=#13024155,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Digest
e6:58:32:1e:2a:33:9d:ae:49:9b:c3:55:51:18:e0:20:97:8d:91:2a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=615 979 765,CN=Outbyte Computing Pty Ltd,O=Outbyte Computing Pty Ltd,L=Sydney,ST=New South Wales,C=AU,1.3.6.1.4.1.311.60.2.1.3=#13024155,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
1031556
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths