Resubmissions

25/07/2026, 21:54

260725-1sbh6sgl2z5

25/07/2026, 21:37

260725-1gs9vavcmd

24/07/2026, 19:49

260724-yj29es1hqc

24/07/2026, 19:36

260724-ybf18aej8w5

24/07/2026, 19:32

260724-x9f87sej3v5

General

  • Target
    cf_real.dll
  • Size 8.7MB
  • Sample260725-1gs9vavcmd
  • SHA256 bb31fea2cdbcf7346645556feceb2c4757ffb9ff4a4156484603c61175cfe8b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • cf_real.dll
    .dll 8.7MB

cf_real.dll

  • IMPHASH 248d44444b5df7d8b0646283a4a29cdc
  • SHA256 bb31fea2cdbcf7346645556feceb2c4757ffb9ff4a4156484603c61175cfe8b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
21:89:f5:1a:e0:f6:50:73:7a:9a:46:43:dd:44:5b:65:2d:44:4a:cc
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=160641700,CN=Idera\, Inc.,O=Idera\, Inc.,L=Houston,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
5040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL
PDB paths