General

  • Target
    papegjenbets.exe
  • Size 512KB
  • Sample260707-n9c24set8m
  • SHA256 4a5091bff9c03a4944d380d9964554c163fc69b3cf06d32ec50bd8c9b222904c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • papegjenbets.exe
    .exe 512KB
  • $PLUGINSDIR/System.dll
    .dll 25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 14KB
  • Banksektoren45.jpg
    .jpg 2KB
  • Delagtiggres98.jpg
    .jpg 6KB
  • Fstemndene/forsvoret.jpg
    .jpg 3KB
  • Fstemndene/stadsdyrlger.ini
    406B
  • Fstemndene/violets.ini
    398B
  • Ndplanernes
    444KB
  • Semioctagonal
    17KB
  • Spectrum70.uns
    1.4MB
  • Triazins.txt
    325B
  • contest.txt
    742B

papegjenbets.exe

  • IMPHASH 9be4f90f50c714bc00cc8beb2e137299
  • SHA256 4a5091bff9c03a4944d380d9964554c163fc69b3cf06d32ec50bd8c9b222904c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
a1:04:33:6b:22:78:83:61:ee:e0:d1:9b:c9:49:41:70:d9:4f:32:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Udstyrede,OU=Udviklingsroman Handelsbankerne\ ,O=Udstyrede,C=GB,1.2.840.113549.1.9.1=#0c204169727369636b6e6573736573404f766572736b75647364656c696e672e5374
Minor OS version
1
Major OS version
5
Entry point
17283
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths