General

  • Target
    85c8e3107a48af00387d80b7f0d7624bcbe2cbbd7fcb49d979cec376c56962ec
  • Size 10.7MB
  • Sample260701-jqq3eaht5n
  • SHA256 85c8e3107a48af00387d80b7f0d7624bcbe2cbbd7fcb49d979cec376c56962ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 85c8e3107a48af00387d80b7f0d7624bcbe2cbbd7fcb49d979cec376c56962ec
    .exe 10.7MB

85c8e3107a48af00387d80b7f0d7624bcbe2cbbd7fcb49d979cec376c56962ec

  • IMPHASH 458224a8b63e88dfeeb68941cd21ee28
  • SHA256 85c8e3107a48af00387d80b7f0d7624bcbe2cbbd7fcb49d979cec376c56962ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
e8:5e:1b:59:24:3b:f3:7c:3c:7d:58:31:77:36:93:b5:d8:12:19:be:16:eb:b8:ad:77:cb:2a:52:eb:eb:56:f2
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91440300746612636Q,CN=SHENZHEN THUNDER NETWORKING TECHNOLOGIES LTD.,O=SHENZHEN THUNDER NETWORKING TECHNOLOGIES LTD.,L=Shenzhen,ST=Guangdong,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

PE Signature issue

Digest
07:1b:03:b6:6b:b5:9b:cc:c9:54:b8:10:78:e9:9c:98:ad:2c:90:58
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=SHENZHEN THUNDER NETWORKING TECHNOLOGIES LTD.,O=SHENZHEN THUNDER NETWORKING TECHNOLOGIES LTD.,L=Shenzhen,ST=Guangdong,C=CN
Minor OS version
0
Major OS version
4
Entry point
3127302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths