General

  • Target
    bseng-1.exe
  • Size 1.8MB
  • Sample260619-pg9faafx5k
  • SHA256 f2e4a4a886757ce7e2492cbc509d2d29fad5674d037482057f3ee77986892198
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • bseng-1.exe
    .exe 1.8MB

bseng-1.exe

  • IMPHASH 0ebb3c09b06b1666d307952e824c8697
  • SHA256 f2e4a4a886757ce7e2492cbc509d2d29fad5674d037482057f3ee77986892198
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
1c:f7:1b:ac:ca:24:f0:03:14:f3:6d:8f:c4:98:54:22:fb:e4:25:eb:fc:04:d5:a6:a1:5e:1f:95:49:85:c6:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Knowhow Information & Communication Inc,O=Knowhow Information & Communication Inc,L=Yeongdeungpo-gu,ST=Seoul,C=KR
Minor OS version
1
Major OS version
5
Entry point
25692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths
wextract.pdb