General

  • Target
    tmp6bnjh3d4
  • Size 4.1MB
  • Sample260602-ms2tgacv2m
  • SHA256 b402280c9619e781d400f4fa87b8898e3832e457d27aed1b5c9ce4886d10f4fc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmp6bnjh3d4
    .exe 4.1MB

tmp6bnjh3d4

  • IMPHASH 1cf50b737d1028a8e639c20bb16f21bc
  • SHA256 b402280c9619e781d400f4fa87b8898e3832e457d27aed1b5c9ce4886d10f4fc
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
fe:90:ac:b8:ff:6f:c9:70:ff:ec:a6:78:48:1d:47:29:f6:6b:7d:63:ed:ea:37:11:a7:58:7a:c5:e1:73:f3:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
21509
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\kujerapoyarak\wacepaso vixarixuzeyok.pdb