General

  • Target
    Aqua.exe
  • Size 6.5MB
  • Sample260620-mkw81set8m
  • SHA256 d0cd19d269c4907aef95f4d7a9dc0c59589159bff4b3d0dc3cafc40e5b64cd6d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Aqua.exe
    .exe 6.5MB

Aqua.exe

  • IMPHASH d42595b695fc008ef2c56aabd8efd68e
  • SHA256 d0cd19d269c4907aef95f4d7a9dc0c59589159bff4b3d0dc3cafc40e5b64cd6d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
14:50:c5:bb:ba:ec:8c:90:a9:b0:59:fc:af:b4:75:7f:38:08:da:a8:f5:d5:26:e7:56:72:f8:6a:d7:8c:38:7f:d1:57:60:44:d3:0a:b4:22:f2:47:d0:34:e6:11:17:43
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Screenshot Task View,OU=Application Services,O=Maple Crest Desktop Group LLC,L=Denver,ST=CO,C=US

PE Signature issue

Digest
10:a0:54:83:37:17:e6:24:34:77:2e:15:76:15:86:6e:8c:71:cb:23
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Screenshot Task View,OU=Application Services,O=Maple Crest Desktop Group LLC,L=Denver,ST=CO,C=US
Minor OS version
1
Major OS version
6
Entry point
477440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths