General

  • Target
    streamer.exe
  • Size 842KB
  • Sample260703-temkyshs6n
  • SHA256 77c2372364b6dd56bc787fda46e6f4240aaa0353ead1e3071224d454038a545e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • streamer.exe
    .exe 842KB

streamer.exe

  • IMPHASH eb97e4fc5518ac300a92a11673825e0b
  • SHA256 77c2372364b6dd56bc787fda46e6f4240aaa0353ead1e3071224d454038a545e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d6:d5:66:95:99:59:0f:ad:5e:33:c3:3d:d7:fb:29:0a:c8:0d:75:b6:7e:5a:b5:06:6a:c6:35:da:31:72:85:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Alfredo Anibal Santos Silva,O=Alfredo Anibal Santos Silva,POSTALCODE=66660,STREET=Rue du grand large+STREET=Résidence les angéliques,L=Port vendres,ST=Languedoc - Roussillon,C=FR

PE Signature issue

Digest
06:cc:47:42:88:e7:eb:db:67:35:86:b8:d2:97:45:84:7e:d4:30:0b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Alfredo Anibal Santos Silva,O=Alfredo Anibal Santos Silva,POSTALCODE=66660,STREET=Rue du grand large+STREET=Résidence les angéliques,L=Port vendres,ST=Languedoc - Roussillon,C=FR
Minor OS version
1
Major OS version
5
Entry point
163658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths