General

  • Target
    PowerISO.exe
  • Size 7.8MB
  • Sample260805-aj7bdatfla
  • SHA256 97522640d00b4697b2f0769af3198c495e2c902772728de72172fdb992d9eabf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • PowerISO.exe
    .exe 7.8MB

PowerISO.exe

  • IMPHASH 4ad6ac47ae572fb8ff4bc283bf68f5a2
  • SHA256 97522640d00b4697b2f0769af3198c495e2c902772728de72172fdb992d9eabf
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
2d:d1:00:56:b4:19:6b:d7:f6:03:fe:9f:c5:1b:c2:a2:4b:a7:2d:8c:12:9f:fc:aa:65:3f:40:01:18:cb:08:74
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains

Jan 1, 0001

PE Signature issue

Digest
a1:63:59:ad:f8:6b:c6:92:b5:66:c4:49:2f:0a:c0:d9:3b:06:eb:48
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
2707968
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths