General

  • Target
    setup.exe
  • Size 17.6MB
  • Sample260814-2td65atbme
  • SHA256 68648fd6bddf0fe80767ab802c411ed53c7df27ceb1374a435bc8cef785ed813
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • setup.exe
    .exe 17.6MB

setup.exe

  • IMPHASH 910ef5a8793c5ffe55f2fb922a8c24d6
  • SHA256 68648fd6bddf0fe80767ab802c411ed53c7df27ceb1374a435bc8cef785ed813
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
51:cf:57:d6:31:2c:7f:29:3b:74:60:dd:fa:c5:70:aa:b0:d6:0d:fd:6a:82:d1:85:50:85:f2:7e:1e:89:99:17
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula Oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275
Minor OS version
0
Major OS version
6
Entry point
1955290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
WinDirStat_x86.pdb