General

  • Target
    00992883xeroxscan.exe
  • Size 219KB
  • Sample260623-ma3caaby7p
  • SHA256 059f89bc7b83b669362cb3ce1182508255c2e97c296c1b9820415d0a9b1ba3d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 00992883xeroxscan.exe
    .exe 219KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • Cylindriskes68/Voxel/Digitigrada
    14KB
  • Cylindriskes68/Voxel/Gallowsmaker.per
    4KB
  • Cylindriskes68/Voxel/Radicals/dijudicated.dig
    37KB
  • Cylindriskes68/Voxel/Radicals/enkeltstaaende.mil
    52KB
  • Cylindriskes68/Voxel/Radicals/podzol.ela
    71KB
  • Cylindriskes68/Voxel/Radicals/sprjter.gal
    37KB
  • Cylindriskes68/Voxel/Radicals/valgdato.god
    50KB
  • Cylindriskes68/Voxel/Rddikens24.sam
    86KB
  • Cylindriskes68/Voxel/Speechfulness176.sky
    37KB
  • Cylindriskes68/Voxel/Trolst.eze
    65KB
  • Cylindriskes68/Voxel/aerolit.mad
    38KB
  • Cylindriskes68/Yesterdays
    165KB

00992883xeroxscan.exe

  • IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
  • SHA256 059f89bc7b83b669362cb3ce1182508255c2e97c296c1b9820415d0a9b1ba3d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
b1:7a:bd:6d:15:2f:f1:5d:7f:fa:ed:8e:b8:44:3d:a6:78:c1:47:5b:e3:00:2e:05:f6:18:05:a0:0a:7b:51:6e:95:d9:2d:49:1a:9c:a1:89:38:31:7c:f6:68:8e:5b:9d
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Gasradiator,OU=Trskende akan Prcedensen\ ,O=Gasradiator,C=US,1.2.840.113549.1.9.1=#0c13486f61726965737440426f6769656e732e436f
Minor OS version
0
Major OS version
4
Entry point
13455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths