envnotify[.]exe | Triage™

General

Target
envnotify.exe
Size 36KB
Sample260721-pbdfnavgka
SHA256 ffa7fd262678a5b04645d011d548003dbb354d119827aaee9e1d94333515d5bb
MD5 1793c31d0cb26c1c2b9f4ea0ec9cbec1
SHA1 3e43ea6163316835ffb731254960de5cdccf18d4
SHA512 9bde3f4141fe1e9704d63c85822bf5180059a1133991120612ae01206fd267018170f5185512dd669d5f10d68edd23954caa7da2673819e29fcafff40248a103
SSDEEP 384:Je60fPixInc5d09SLOOo4hsHfg6Zj6jyAMkkH/EDH0xB40nul8Y4Gvm1KS2dFZOj:XxOz87hG/ZNAMkkfEDUJnS2Z1H2dFkj
TLSH
T17BF24B0135E18472D4635A7044B4E661AA7F3D5297B0C18B3BA816BEAFB13D04FB8367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
envnotify.exe

IMPHASH 27bfc10d7c16ec8f1b6f12dfe7439195
SHA256 ffa7fd262678a5b04645d011d548003dbb354d119827aaee9e1d94333515d5bb
MD5 1793c31d0cb26c1c2b9f4ea0ec9cbec1
SHA1 3e43ea6163316835ffb731254960de5cdccf18d4
SHA512 9bde3f4141fe1e9704d63c85822bf5180059a1133991120612ae01206fd267018170f5185512dd669d5f10d68edd23954caa7da2673819e29fcafff40248a103
SSDEEP 384:Je60fPixInc5d09SLOOo4hsHfg6Zj6jyAMkkH/EDH0xB40nul8Y4Gvm1KS2dFZOj:XxOz87hG/ZNAMkkfEDUJnS2Z1H2dFkj
TLSH
T17BF24B0135E18472D4635A7044B4E661AA7F3D5297B0C18B3BA816BEAFB13D04FB8367
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

5208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ninite\Output\Tools\envnotify.pdb