General

  • Target
    tmpxwhk_70o
  • Size 1.7MB
  • Sample260601-vxpnpsbt9v
  • SHA256 10a42afe96fc2c9587caee9f58321f3651d8321df964bc61343817d8b1d74c9b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • tmpxwhk_70o
    .exe 1.7MB

tmpxwhk_70o

  • IMPHASH 4035d2883e01d64f3e7a9dccb1d63af5
  • SHA256 10a42afe96fc2c9587caee9f58321f3651d8321df964bc61343817d8b1d74c9b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
c0:ab:3a:18:d7:fb:39:e0:3b:f6:56:f3:9f:e2:51:6b:1b:8e:66:67:14:d1:47:6a:e5:bb:08:97:4b:dc:ba:c7
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KR

PE Signature issue

Digest
b7:34:e2:d3:53:1d:87:b0:6f:bc:82:db:c2:38:97:62:c2:02:10:b0
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KR
Minor OS version
1
Major OS version
6
Entry point
395584
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths