General

  • Target
    3eca2d75b0cfc8e13590a9d2e41691863dd3c7d3fe506f3ebf4c5bdacfd21451.exe
  • Size 330KB
  • Sample260727-elf97ahb59
  • SHA256 3eca2d75b0cfc8e13590a9d2e41691863dd3c7d3fe506f3ebf4c5bdacfd21451
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 3eca2d75b0cfc8e13590a9d2e41691863dd3c7d3fe506f3ebf4c5bdacfd21451.exe
    .exe 330KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • Anaskelades/judaistic.txt
    423B
  • Anaskelades/mallies.hem
    49KB
  • Anaskelades/playlets.txt
    632B
  • Anaskelades/polit.ini
    639B
  • Anaskelades/stumpe.txt
    605B
  • Anaskelades/udrejsetilladelse.ter
    21KB
  • Anaskelades/unreverberating.ron
    50KB
  • Andenhaandsberetningernes/Dollbeer.txt
    541B
  • Andenhaandsberetningernes/Networking.jpg
    .jpg 11KB
  • Andenhaandsberetningernes/Opuntiaceae3.bay
    49KB
  • Andenhaandsberetningernes/Rullebjlker.ini
    390B
  • Andenhaandsberetningernes/capitalizing.txt
    723B
  • Andenhaandsberetningernes/csarismen.jpg
    .jpg 18KB
  • Andenhaandsberetningernes/dampishly.fug
    22KB
  • Andenhaandsberetningernes/dikotomien.txt
    232B
  • Andenhaandsberetningernes/formatindstillingens.nik
    36KB
  • Dagligvarehandlen140.jpg
    .jpg 4KB
  • Stencillers
    320KB

3eca2d75b0cfc8e13590a9d2e41691863dd3c7d3fe506f3ebf4c5bdacfd21451.exe

  • IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
  • SHA256 3eca2d75b0cfc8e13590a9d2e41691863dd3c7d3fe506f3ebf4c5bdacfd21451
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
b0:04:f4:df:7c:c7:ba:af:3d:db:d4:79:78:6b:7b:ef:50:95:ee:ca:40:7b:89:d4:ec:25:f8:57:e4:de:75:bb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Pindehuggeris,OU=Ondskabernes Overinflation Afrensendes\ ,O=Pindehuggeris,C=GB,1.2.840.113549.1.9.1=#0c15666f72656e6b6c65646540436f61646d69742e6b6c
Minor OS version
0
Major OS version
4
Entry point
12960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths