General

  • Target
    c8f5b829983f9e60671639199925a88867044871ec2f0d5b20085905ba15cdd5
  • Size 1.7MB
  • Sample260813-gm5ehsck4x
  • SHA256 c8f5b829983f9e60671639199925a88867044871ec2f0d5b20085905ba15cdd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • c8f5b829983f9e60671639199925a88867044871ec2f0d5b20085905ba15cdd5
    .dll 1.7MB

c8f5b829983f9e60671639199925a88867044871ec2f0d5b20085905ba15cdd5

  • IMPHASH 0727d187c0336018315a85f14441b52e
  • SHA256 c8f5b829983f9e60671639199925a88867044871ec2f0d5b20085905ba15cdd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
85:ec:43:ed:59:44:c3:26:17:9d:d1:22:bb:06:0d:c4:a5:a0:58:f5:88:b3:fb:80:12:a8:77:c9:e8:08:a7:11
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=9131012030160721XG,CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e5a589e8b4a4e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

PE Signature issue

Digest
3b:c9:9e:b0:e4:08:b2:33:db:cc:38:b4:b9:18:e2:94:c6:39:00:88
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=9131012030160721XG,CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e5a589e8b4a4e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
1158282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths