General

  • Target
    60d6a1b7f09302cc607d674007cfc620ec2838699d2a12df8d789bc0212fdda4.exe
  • Size 1.1MB
  • Sample260801-d79cesdb44
  • SHA256 60d6a1b7f09302cc607d674007cfc620ec2838699d2a12df8d789bc0212fdda4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 60d6a1b7f09302cc607d674007cfc620ec2838699d2a12df8d789bc0212fdda4.exe
    .exe 1.1MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • Eyestones/Confecture/Cementeringen/domsfldelsens.jpg
    .jpg 17KB
  • Eyestones/Confecture/Cementeringen/genetablerede.jpg
    .jpg 6KB
  • Eyestones/Confecture/Cementeringen/hostiley.jpg
    .jpg 94KB
  • Eyestones/Confecture/Cementeringen/indsbningerne.ini
    445B
  • Eyestones/Confecture/Cementeringen/interdentally.jpg
    .jpg 4KB
  • Eyestones/Confecture/Cementeringen/kirkerottes.ini
    206B
  • Eyestones/Confecture/Cementeringen/plsefabrikant.txt
    141B
  • Eyestones/Confecture/Cementeringen/quadriglandular.jpg
    .jpg 30KB
  • Eyestones/Confecture/Cementeringen/tankelseres.txt
    736B
  • Eyestones/Confecture/Cementeringen/vakia.txt
    529B
  • Eyestones/Confecture/Skifterammen177.ini
    297B
  • Eyestones/Confecture/Skydebomuldens.txt
    402B
  • Eyestones/Confecture/Stimering39.fak
    8.6MB
  • Eyestones/Confecture/afstaaelser.jpg
    .jpg 16KB
  • Eyestones/Confecture/californiers.jpg
    .jpg 34KB
  • Eyestones/Confecture/congressmen.jpg
    .jpg 8KB
  • Eyestones/Hovedstrukturs.jpg
    .jpg 37KB
  • Galleren.ini
    415B
  • Jerngittersengen
    75KB
  • Saksere
    240KB

60d6a1b7f09302cc607d674007cfc620ec2838699d2a12df8d789bc0212fdda4.exe

  • IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
  • SHA256 60d6a1b7f09302cc607d674007cfc620ec2838699d2a12df8d789bc0212fdda4
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
0f:c3:82:02:e3:c4:c0:24:fd:e4:7d:57:d7:d3:69:59:b2:4b:01:af:08:01:e3:88:d9:52:a9:bf:a8:db:cc:1c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Supplementary,OU=Lavishing Lall\ ,O=Supplementary,C=FR,1.2.840.113549.1.9.1=#0c1e5472616e73706172656e74697365313837404a766e696e676572732e6d61
Minor OS version
0
Major OS version
4
Entry point
13709
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths