General

  • Target
    WhatsApp Installer (3) (1).exe
  • Size 1.4MB
  • Sample260708-ptrq1afx3v
  • SHA256 5a812356948454255836cd58f861759d13b16b3b956eb01452651cd9cd5f0e4e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • WhatsApp Installer (3) (1).exe
    .exe 1.4MB

WhatsApp Installer (3) (1).exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 5a812356948454255836cd58f861759d13b16b3b956eb01452651cd9cd5f0e4e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
37:03:d8:fd:e6:a1:84:fa:bd:51:4e:78:6f:4a:b0:d8:a0:31:af:2b:21:52:46:11:a2:b0:88:d1:3f:1f:5a:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
1332938
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb