General

  • Target
    df8713d43b4799acade8e6240fab3dbb4063caa25c7b1d9aca326eb991f20968.exe
  • Size 665KB
  • Sample260810-vnyv1steja
  • SHA256 df8713d43b4799acade8e6240fab3dbb4063caa25c7b1d9aca326eb991f20968
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • df8713d43b4799acade8e6240fab3dbb4063caa25c7b1d9aca326eb991f20968.exe
    .exe 665KB
  • Abbreviatory.del
    442KB
  • Bagtalelsernes.ini
    374B
  • Fernissages219.Cit
    .ps1 51KB
  • Ukultur/Verminicidal/ringworm.ini
    634B
  • Ukultur/Verminicidal/storeslemmernes.oph
    1.3MB
  • Ukultur/Verminicidal/ticca.sle
    4.4MB
  • Ukultur/Verminicidal/uhaandgribelighed.res
    3.3MB
  • Ukultur/delsystemet.ini
    910B
  • Ukultur/fascisticize.txt
    519B
  • Ukultur/innage.pro
    808KB
  • Ukultur/katrinka.jpg
    .jpg 12KB
  • Ukultur/kollokviums.fib
    130KB

df8713d43b4799acade8e6240fab3dbb4063caa25c7b1d9aca326eb991f20968.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 df8713d43b4799acade8e6240fab3dbb4063caa25c7b1d9aca326eb991f20968
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
8e:7c:b1:a3:e8:ad:95:0e:23:b5:39:f1:29:d8:62:57:8c:39:ed:ee:b9:cf:14:75:8f:52:96:58:a6:7f:d4:5f:70:ef:b9:e4:d7:59:dc:70:cd:cb:85:c9:7b:1d:10:07
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=vemodssukkene,L=Avery,ST=California,C=US,1.2.840.113549.1.9.1=#0c19416972696573744043617374696761746f727939352e537573
Minor OS version
0
Major OS version
4
Entry point
13136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths