General

  • Target
    btweb.exe
  • Size 9.1MB
  • Sample260811-e5n45sfr7s
  • SHA256 a97a0f415625bfba03c5ee8e19624f199b8edbddd423a18799aa2de282c01c75
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • btweb.exe
    .exe 9.1MB

btweb.exe

  • IMPHASH 0cf1da50f4bfb6ac6e2720794f62ee91
  • SHA256 a97a0f415625bfba03c5ee8e19624f199b8edbddd423a18799aa2de282c01c75
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

Password
infected

PE Signature issue

Digest
da:25:4e:fe:1e:36:d3:04:d7:79:35:ec:3e:df:ab:9b:e6:61:8c:17:26:79:48:5c:f4:60:0f:6b:6d:8b:72:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=74291421,CN=RainCo HK Limited,O=RainCo HK Limited,L=Kwun Tong,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
6
Entry point
38886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
X:\jenkins-workspace\workspace\_pipelines_master-build-1.6.0-r4\Build.bt_web\RelWithDebInfo\btweb.pdb