General

  • Target
    1f15e60769edfe2f3061c191ea9a7ce5656bbe90a0737d7d47e079d2841b3933
  • Size 11.9MB
  • Sample260808-knx9dack9x
  • SHA256 1f15e60769edfe2f3061c191ea9a7ce5656bbe90a0737d7d47e079d2841b3933
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 1f15e60769edfe2f3061c191ea9a7ce5656bbe90a0737d7d47e079d2841b3933
    .exe 11.9MB

1f15e60769edfe2f3061c191ea9a7ce5656bbe90a0737d7d47e079d2841b3933

  • IMPHASH eb5bc6ff6263b364dfbfb78bdb48ed59
  • SHA256 1f15e60769edfe2f3061c191ea9a7ce5656bbe90a0737d7d47e079d2841b3933
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
09:ba:58:08:d9:2a:ff:1b:42:32:98:83:a6:a5:d0:c8:b5:eb:96:80:54:db:1f:36:1e:2c:8d:a4:7a:62:c2:31
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91440300795429977A,CN=深圳市汉森软件股份有限公司,O=深圳市汉森软件股份有限公司,STREET=宝安区西乡街道固兴社区航城大道中德欧产业示范园A栋A201-A301,L=深圳市,ST=广东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
75:7d:b6:c3:0c:a3:5b:a1:80:0b:80:dc:98:f1:56:86:dc:99:6c:5d
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91440300795429977A,CN=深圳市汉森软件股份有限公司,O=深圳市汉森软件股份有限公司,STREET=宝安区西乡街道固兴社区航城大道中德欧产业示范园A栋A201-A301,L=深圳市,ST=广东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
6
Entry point
683728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths