Overview

overview

10

Static

static

5

file.exe

windows10-2004-x64

10

file.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    file.exe
  • Size 3.9MB
  • Sample260531-fl2fssbw9l
  • SHA256 bf40a0f7d4d10448e5cae29b32c9e55e232bf80c04500c5e8f4f82bd427a8a29
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • file.exe
    .exe 3.9MB

file.exe

  • IMPHASH 7b474ee754a35724283e1199bc061892
  • SHA256 bf40a0f7d4d10448e5cae29b32c9e55e232bf80c04500c5e8f4f82bd427a8a29
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx86arch:x86

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
8c:8c:86:b5:79:37:12:51:03:9d:eb:42:de:1f:ee:dc:8f:43:3a:0a:52:b4:59:59:66:e8:38:4d:00:64:25:df
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=1Password,OU=1Password Desktop,O=1Password,L=Toronto,ST=Ontario,C=CA
Minor OS version
0
Major OS version
4
Entry point
5088
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths