General

  • Target
    8BallPoolModMenu.exe
  • Size 11.3MB
  • Sample260701-pceecafw3t
  • SHA256 46af02bed6fe06ce0ca7640eb4ae67837cc96c53c60f5e6c67159a33023fb48e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 8BallPoolModMenu.exe
    .exe 11.3MB

8BallPoolModMenu.exe

  • IMPHASH f8672813c863d7ebe5de035430bf89c9
  • SHA256 46af02bed6fe06ce0ca7640eb4ae67837cc96c53c60f5e6c67159a33023fb48e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
be:27:aa:62:64:d5:02:96:fc:7d:8b:48:a8:1a:74:58:1b:c0:b1:58:93:e4:6e:f3:76:79:60:1d:b5:e0:0e:3f:f9:d8:a6:38:54:7f:70:55:83:4d:97:b4:cf:a9:3b:e3:11:ed:f4:91:d0:e7:cc:09:db:02:a7:d7:57:1e:b7:88
Digest Algorithm
sha512
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Temp File Mode Toggle,OU=Software Publishing,O=MapleWood Field Software Inc.,L=Austin,ST=TX,C=US

PE Signature issue

Digest
52:35:ce:33:ac:99:13:d1:c5:3d:a1:2e:99:ea:35:fb:14:b7:45:7d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Temp File Mode Toggle,OU=Software Publishing,O=MapleWood Field Software Inc.,L=Austin,ST=TX,C=US
Minor OS version
0
Major OS version
6
Entry point
7461696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths