General

  • Target
    2bcd8c94b265220a40692f1734df975982192baef3373da512c8010b27f92b0b
  • Size 3.4MB
  • Sample260714-lpgtfscw7z
  • SHA256 2bcd8c94b265220a40692f1734df975982192baef3373da512c8010b27f92b0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2bcd8c94b265220a40692f1734df975982192baef3373da512c8010b27f92b0b
    .exe 3.4MB

2bcd8c94b265220a40692f1734df975982192baef3373da512c8010b27f92b0b

  • IMPHASH b7d9c2620536bc958deb25465e93dbef
  • SHA256 2bcd8c94b265220a40692f1734df975982192baef3373da512c8010b27f92b0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
45:d5:8f:39:ad:b2:b7:ae:85:c1:ed:ac:da:38:4d:7b:37:39:43:66:e8:ca:d7:52:83:64:b4:6c:d0:18:1b:c2
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=72759881,CN=JUST OKAY LIMITED,O=JUST OKAY LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

PE Signature issue

Digest
ac:c1:94:2b:01:7a:06:03:62:cc:a8:4a:dd:ed:e5:e8:08:81:17:68
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=72759881,CN=JUST OKAY LIMITED,O=JUST OKAY LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Minor OS version
0
Major OS version
6
Entry point
1522301
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Code\海外下载器\downloader_en_vs2019_1\xzdownloader\bin\xzdownloader.pdb