Resubmissions

17/07/2026, 16:27

260717-tx6fsafv4q3

17/07/2026, 12:48

260717-p17e2afv3s3

17/07/2026, 12:39

260717-pvs1fsft7s4

17/07/2026, 12:27

260717-pmy7habs4k8

General

  • Target
    Bonavol_p3ti.exe
  • Size 6.6MB
  • Sample260717-pvs1fsft7s
  • SHA256 4c7d4040e08fe12dab0c63a32c3134ae6c213fcddbe322ab341b926296cd6123
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Bonavol_p3ti.exe
    .exe 6.6MB

Bonavol_p3ti.exe

  • IMPHASH dc6e326a5922402911442c61f2960b8e
  • SHA256 4c7d4040e08fe12dab0c63a32c3134ae6c213fcddbe322ab341b926296cd6123
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
fc:70:10:60:dc:30:8e:2b:65:4c:c3:31:ee:22:71:ff:0e:9f:fa:fc:a8:7b:8b:c0:a0:53:28:ee:af:b0:fb:54
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Startup Update Mirror,OU=Application Services,O=RoseLine Software LLC,L=London,C=GB

PE Signature issue

Digest
be:26:4b:9f:55:7f:8c:0e:32:6f:d8:fa:77:b4:39:3c:c0:ee:d4:e8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Startup Update Mirror,OU=Application Services,O=RoseLine Software LLC,L=London,C=GB
Minor OS version
2
Major OS version
5
Entry point
3199616
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths