General

  • Target
    d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79
  • Size 12.1MB
  • Sample260723-wp177shk2x
  • SHA256 d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79
    .exe 12.1MB

d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79

  • IMPHASH 5bce82d759aadbbb257c886bd0225eec
  • SHA256 d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d4:cc:69:37:fa:9d:c9:a8:2e:63:f2:50:cf:b2:e7:6a:bc:39:b3:06:18:af:26:0c:92:1c:1e:97:28:b9:7b:33:46:a4:b5:51:6e:02:21:52:8a:74:0f:7d:4e:30:a4:a6:32:c6:8d:96:03:b9:a6:0e:52:35:db:86:64:12:73:e6
Digest Algorithm
sha512
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Temp File Mode Toggle\, O=GoldGrove Cloud Works\, LLC\, OU=Platform Operations\, L=Toronto\, S=ON\, C=CA

PE Signature issue

Digest
e3:b7:5e:9c:9b:db:5a:44:66:22:be:5e:9b:a4:c9:89:4a:79:4f:1b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Temp File Mode Toggle\, O=GoldGrove Cloud Works\, LLC\, OU=Platform Operations\, L=Toronto\, S=ON\, C=CA
Minor OS version
0
Major OS version
6
Entry point
7967481
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths