General

  • Target
    wexside.new.exe
  • Size 659KB
  • Sample260730-xgp1mseq7x
  • SHA256 f872afc6a4a271fc1b45a266107b0f4ccec5ef17d156bf76dd55537de86c545a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • wexside.new.exe
    .exe 659KB

wexside.new.exe

  • SHA256 f872afc6a4a271fc1b45a266107b0f4ccec5ef17d156bf76dd55537de86c545a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
2c:ec:14:19:28:48:e8:37:58:5c:d0:15:c1:19:dc:b3:d8:88:33:67:40:b9:cf:c5:57:4c:87:41:34:34:25:2d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths