General

  • Target
    a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04.exe
  • Size 943KB
  • Sample260720-qs6dfaby5r
  • SHA256 a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • NSIS installer 2 IoCs

File Explorer

  • a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04.exe
    .exe 943KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • Blepharophthalmia
    115KB
  • Bundtningerne.txt
    396B
  • Controversially240.txt
    427B
  • Egenses.jpg
    .jpg 20KB
  • Kullagers/mallorcinernes.jpg
    .jpg 3KB
  • Kullagers/thetch.und
    7.4MB
  • Markoerknuden/Minglement/bvet.jpg
    .jpg 15KB
  • Markoerknuden/Minglement/differentiabiliteten.ini
    242B
  • Markoerknuden/Minglement/leaviest.jpg
    .jpg 26KB
  • Markoerknuden/Minglement/lepa.txt
    504B
  • Markoerknuden/Revolverbnkes.ini
    534B
  • Markoerknuden/Rundmundene.jpg
    .jpg 44KB
  • Markoerknuden/Uncensurableness.ini
    628B
  • Markoerknuden/adventive.ini
    644B
  • Markoerknuden/anabolic.txt
    396B
  • Markoerknuden/balletomane.ini
    408B
  • Markoerknuden/bushelful.ini
    409B
  • Mocambiquernes
    270KB
  • Styrkegraden31/Mnttelefoner41.jpg
    .jpg 98KB

a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04.exe

  • IMPHASH 9a16e282eba7cc710070c0586c947693
  • SHA256 a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • NSIS installer

PE Signature issue

Digest
1c:21:c1:a1:5b:6c:c9:27:92:b4:a5:ee:a4:96:91:62:d0:37:3b:ae:a3:06:93:24:b1:72:4c:23:b5:32:c7:44:72:a8:3d:d5:bf:c0:f2:de:e0:29:8a:78:b7:25:ef:0d
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Transitivt,OU=Skraane Intersertal Fyldigt\ ,O=Transitivt,C=US,1.2.840.113549.1.9.1=#0c1b46696f7269747572614048657465726f7468616c6c69736d2e4f76

PE Signature issue

Digest
14:7b:18:3b:29:d0:db:80:1d:6c:c4:2c:04:ad:d1:ec:65:1c:12:46:b9:7f:a7:ad:8c:cd:a2:80:82:9d:9c:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Transitivt,OU=Skraane Intersertal Fyldigt\ ,O=Transitivt,C=US,1.2.840.113549.1.9.1=#0c1b46696f7269747572614048657465726f7468616c6c69736d2e4f76
Minor OS version
0
Major OS version
4
Entry point
13331
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths