General

  • Target
    Upaavirkeligheden.exe
  • Size 497KB
  • Sample260720-ajqcvshw4p
  • SHA256 532af7026091f1b8eea917ef49903baaa68aca440b334cee8ac22ec7c56aae62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Upaavirkeligheden.exe
    .exe 497KB
  • $PLUGINSDIR/System.dll
    .dll 25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 14KB
  • Lrebogsmateriales/Banksektoren45.jpg
    .jpg 2KB
  • Lrebogsmateriales/Branddrjt/Delagtiggres98.jpg
    .jpg 6KB
  • Lrebogsmateriales/Branddrjt/Ortive
    26KB
  • Lrebogsmateriales/Branddrjt/Spectrum70.uns
    1.4MB
  • Lrebogsmateriales/Branddrjt/Triazins.txt
    325B
  • Lrebogsmateriales/Branddrjt/contest.txt
    742B
  • Lrebogsmateriales/Branddrjt/forsvoret.jpg
    .jpg 3KB
  • Lrebogsmateriales/Branddrjt/stadsdyrlger.ini
    406B
  • Lrebogsmateriales/Branddrjt/violets.ini
    398B
  • nonrepressibly
    419KB

Upaavirkeligheden.exe

  • IMPHASH 9be4f90f50c714bc00cc8beb2e137299
  • SHA256 532af7026091f1b8eea917ef49903baaa68aca440b334cee8ac22ec7c56aae62
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
85:8d:aa:47:ea:5e:f2:73:8a:9f:b0:7d:1d:2b:98:bb:ff:b0:34:07
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Ultralydenes,OU=Denominationalist Jogurter Rentetabet\ ,O=Ultralydenes,C=US,1.2.840.113549.1.9.1=#0c1e44656d6172676172696e61746540436f6e747261706f736974612e4b6162
Minor OS version
1
Major OS version
5
Entry point
17283
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths