Analysis

  • custom tags

    oss_ak

General

  • Target
    cf136f2e76c96adb38ea0ab1acbdf7921bce6b3c0afd96912f8c2025d3c3caf1
  • Size 1.2MB
  • Sample260710-jc28hsfv2q
  • SHA256 cf136f2e76c96adb38ea0ab1acbdf7921bce6b3c0afd96912f8c2025d3c3caf1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • detect oss ak 1 IoCs

    oss ak information detected.

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • cf136f2e76c96adb38ea0ab1acbdf7921bce6b3c0afd96912f8c2025d3c3caf1
    .exe 1.2MB

cf136f2e76c96adb38ea0ab1acbdf7921bce6b3c0afd96912f8c2025d3c3caf1

  • IMPHASH 5afff36c96e38c2019cd1cc929959d9b
  • SHA256 cf136f2e76c96adb38ea0ab1acbdf7921bce6b3c0afd96912f8c2025d3c3caf1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • detect oss ak

    oss ak information detected.

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
6a:7a:c4:82:ed:f6:f0:88:96:57:25:69:b4:7f:72:62:e8:5a:08:c9:cd:7e:67:85:9f:3f:72:fe:49:fe:70:f8
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=72759881,CN=JUST OKAY LIMITED,O=JUST OKAY LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

PE Signature issue

Digest
48:c7:1d:7b:00:ff:20:be:3c:3d:9a:c3:dd:9f:80:70:50:93:51:97
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=72759881,CN=JUST OKAY LIMITED,O=JUST OKAY LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Minor OS version
1
Major OS version
5
Entry point
251719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\build\trunk_en_9.1\simulator\bin\bugreport.pdb