General

  • Target
    IMF.exe
  • Size 7.0MB
  • Sample260620-fb7vtsds3l
  • SHA256 83a13afa1ef17c5ffa51e3e9f69107eea9f7017cbc531f49138796cd66bb7275
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • IMF.exe
    .exe 7.0MB

IMF.exe

  • IMPHASH 37607894ac69748dce04d17e97db0f72
  • SHA256 83a13afa1ef17c5ffa51e3e9f69107eea9f7017cbc531f49138796cd66bb7275
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
3c:5d:f9:a8:8e:16:96:12:41:14:e5:30:7a:ea:d9:fc:dd:d1:cc:ae:d6:5f:88:bb:c5:8b:1b:8c:87:a4:ca:30
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91510107072412418F,CN=IObit Co.\, Ltd.,O=IObit Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
7f:ab:a3:db:a2:47:80:4f:d8:ae:ae:50:a3:07:2c:9c:fd:e9:09:b0
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91510107072412418F,CN=IObit Co.\, Ltd.,O=IObit Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
4859168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths