0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff.bin.exe
Size 2.9MB
Sample260812-e99xeav1dw
SHA256 0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff
MD5 c35237f4e5e0b03127dc0024ea6c8dd3
SHA1 c7596c0f6aa7a2f695cef5125986f333df29d02f
SHA512 1a84a01e949c19fafe80b64e86c3ecfc5cef33da5dac36599de4f4a38b4a1a4abfa4fc3083bbd70a10262ae3f7d28b245667b1e43e49372b417a90a500a0ce5e
SSDEEP 49152:ywzYf97N5HLsartFZUiF21yX1xXtdcM6pYn0yKPP7gk:yws1gcxXbcHY0yMP
TLSH
T191E57B06BCE149E9C4AEA23289B711927B71BC080F3667D76E50B7382FB2BD15D36744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff.bin.exe

File Explorer

0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff.bin.exe

.exe 2.9MB

0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff.bin.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff
MD5 c35237f4e5e0b03127dc0024ea6c8dd3
SHA1 c7596c0f6aa7a2f695cef5125986f333df29d02f
SHA512 1a84a01e949c19fafe80b64e86c3ecfc5cef33da5dac36599de4f4a38b4a1a4abfa4fc3083bbd70a10262ae3f7d28b245667b1e43e49372b417a90a500a0ce5e
SSDEEP 49152:ywzYf97N5HLsartFZUiF21yX1xXtdcM6pYn0yKPP7gk:yws1gcxXbcHY0yMP
TLSH
T191E57B06BCE149E9C4AEA23289B711927B71BC080F3667D76E50B7382FB2BD15D36744
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d7:cd:8f:fa:79:79:1c:fb:74:b5:db:3e:96:9f:7a:55:75:2b:ce:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=eataly.com,O=BHnIuti7vX,L=DR3dd1Wo,ST=pP9yd,C=US

Chains

Aug 6, 2026

CN=eataly.com,O=BHnIuti7vX,L=DR3dd1Wo,ST=pP9yd,C=US

Minor OS version

Major OS version

Entry point

476768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

857KB

Virtual Size

857KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

54KB

Virtual Size

347KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

114KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff.bin.exe

PE Signature issue

kernel32

generic