General

  • Target
    Drip.exe
  • Size 4.0MB
  • Sample260808-1f4n7afe44
  • SHA256 8c93b3701990e404a2f3fd6f58092aed4ef20fdbb684c86b5bf71c4e6ab6c3fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • Drip.exe
    .exe 4.0MB

Drip.exe

  • IMPHASH 00696255f4f88c59d82891fc1a34b7e5
  • SHA256 8c93b3701990e404a2f3fd6f58092aed4ef20fdbb684c86b5bf71c4e6ab6c3fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
6d:96:24:63:da:9d:ad:8f:8e:cf:13:08:09:62:c3:2f:56:fd:e0:5d:61:25:34:97:fe:bf:dc:7b:ad:d9:b2:c4
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Kurium,O=Kurium,L=Emmeloord,C=NL

PE Signature issue

Digest
2e:ed:67:53:05:f6:7d:54:22:67:16:0e:49:64:06:38:1b:be:7f:6c
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Kurium,O=Kurium,L=Emmeloord,C=NL
Minor OS version
0
Major OS version
6
Entry point
173240
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths