General

  • Target
    3.6.0.Safewin_chfy_PIAX_v0.1.2.exe
  • Size 93.0MB
  • Sample260727-l697bsad35
  • SHA256 dfbbc455accdfce3fbbd3261a556876adcbff056ceddf48a231c59e0ef920827
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • 3.6.0.Safewin_chfy_PIAX_v0.1.2.exe
    .exe 93.0MB

3.6.0.Safewin_chfy_PIAX_v0.1.2.exe

  • IMPHASH 1c8abb0d55065ed8370628959ce78804
  • SHA256 dfbbc455accdfce3fbbd3261a556876adcbff056ceddf48a231c59e0ef920827
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

PE Signature issue

Digest
48:ed:2b:ac:e0:4b:a3:3a:97:2b:f6:24:9b:5f:fe:51:66:bb:5a:ea
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Minor OS version
1
Major OS version
6
Entry point
1036528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths