General

  • Target
    t0907.exe
  • Size 1.4MB
  • Sample260709-pgldfsh12n
  • SHA256 6a2b4d68e0b5367645ec7d108b1146be4fba1f478e75d7d91b52b8f0b636d7d2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • t0907.exe
    .exe 1.4MB

t0907.exe

  • IMPHASH 66f1d669875f10b3526b656a280f3f56
  • SHA256 6a2b4d68e0b5367645ec7d108b1146be4fba1f478e75d7d91b52b8f0b636d7d2
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
e6:80:cb:df:b5:4c:63:07:f1:c4:c8:ef:00:87:1c:42:3c:16:f1:04:e6:df:f4:ff:17:07:f5:6c:6f:cc:d6:a9
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Gen Digital Inc.,O=Gen Digital Inc.,ST=Arizona,C=US
Minor OS version
0
Major OS version
6
Entry point
7056
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths