General

  • Target
    SENTINAL2.dll
  • Size 494KB
  • Sample260808-pbj87ser6s
  • SHA256 565432f375223704c560e11e441c194e06ce7c5c0a40a9ea74e524f927c20edb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • SENTINAL2.dll
    .dll 494KB

SENTINAL2.dll

  • IMPHASH 20aaebf511d4c6d32883f2cda657e103
  • SHA256 565432f375223704c560e11e441c194e06ce7c5c0a40a9ea74e524f927c20edb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
17:bc:5e:9b:49:ff:49:50:00:ab:12:4d:60:fc:47:ea:06:a9:38:df:d4:3a:69:a4:8c:db:80:4e:d0:5b:38:e4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Henan Pushitong Intelligent Technology Co.\, Ltd.,O=Henan Pushitong Intelligent Technology Co.\, Ltd.,L=Zhengzhou,ST=Henan,C=CN
Minor OS version
0
Major OS version
6
Entry point
373600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\Han3\Desktop\Legit\x64\Release\Internal MAGIC BULLET.pdb