General

  • Target
    5b1467f15f0977feb69d11ed6e05524294237c6db0f73187eab43d640a1dc84a.exe
  • Size 712KB
  • Sample260810-jabyjstdqd
  • SHA256 5b1467f15f0977feb69d11ed6e05524294237c6db0f73187eab43d640a1dc84a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 5b1467f15f0977feb69d11ed6e05524294237c6db0f73187eab43d640a1dc84a.exe
    .exe 712KB

5b1467f15f0977feb69d11ed6e05524294237c6db0f73187eab43d640a1dc84a.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 5b1467f15f0977feb69d11ed6e05524294237c6db0f73187eab43d640a1dc84a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
3b:5e:ee:45:aa:be:66:1e:ee:89:68:f3:93:2a:52:20:13:f9:f4:9e:c0:1a:64:89:5e:b2:34:0d:ee:69:0f:7d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

PE Signature issue

Digest
11:e2:d8:8b:6c:ea:cb:a8:35:c3:39:85:cc:a0:13:3e:a1:14:a1:d2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Minor OS version
0
Major OS version
4
Entry point
603758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
DZRsDN.pdb