General

  • Target
    Vmlyjlrir.exe
  • Size 1.5MB
  • Sample260620-qb76pse17n
  • SHA256 afa807cee34e8b931688ccf2be76b7ea5337af3d64714a348bead839c756643a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Vmlyjlrir.exe
    .exe 1.5MB

Vmlyjlrir.exe

  • IMPHASH 1aae8bf580c846f39c71c05898e57e88
  • SHA256 afa807cee34e8b931688ccf2be76b7ea5337af3d64714a348bead839c756643a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
11:64:11:e2:08:1d:bb:84:54:07:65:a5:c7:d4:f9:15:cc:c3:f7:1f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=sindimec.org.br,O=aDPEsGCK,L=Xs6Gfk,ST=BKxWZM,C=US
Minor OS version
1
Major OS version
6
Entry point
439296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths