General

  • Target
    Shutdown Timer Classic Installer.exe
  • Size 1.3MB
  • Sample260703-prk6faes3q
  • SHA256 1575d32763c9aee9f9e1b671fa1ee30ce32aafec5e32c26677c6b6262eb460c4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Shutdown Timer Classic Installer.exe
    .exe 1.3MB

Shutdown Timer Classic Installer.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 1575d32763c9aee9f9e1b671fa1ee30ce32aafec5e32c26677c6b6262eb460c4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
72:24:06:70:ad:e0:4f:42:e1:0b:e5:d8:f3:c3:d0:1b:b2:16:b5:2e:af:71:85:b3:4e:a4:86:a4:01:f2:84:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
1217746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb