General

  • Target
    ashCmd.exe
  • Size 747KB
  • Sample260805-tealds1ake
  • SHA256 a2eaf3bd576677eaa4471f511e022297fa2a7f3f4c3bc40136cbc9e818b97eeb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ashCmd.exe
    .exe 747KB

ashCmd.exe

  • IMPHASH e5cb42b4193dfaebad97342d4bd9b569
  • SHA256 a2eaf3bd576677eaa4471f511e022297fa2a7f3f4c3bc40136cbc9e818b97eeb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ff:ba:95:b8:13:a0:9a:27:0c:26:ea:f1:d7:69:00:90:22:06:79:be:aa:21:9b:c4:05:d8:ad:28:29:87:30:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NortonLifeLock Inc.,OU=Norton Product Engineering - CM,O=NortonLifeLock Inc.,L=Tempe,ST=Arizona,C=US
Minor OS version
0
Major OS version
6
Entry point
276640
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\BUILD\work\e0dd96435fde7cb0\BUILDS\Release\x64\ashCmd.pdb