Resubmissions

15/08/2026, 19:49

260815-yj12cssgje

15/08/2026, 19:46

260815-yg26msttbt10

General

  • Target
    Sync (1).dll
  • Size 1.4MB
  • Sample260815-yj12cssgje
  • SHA256 a437d7ccc8b9b633f1be051e5c22a8ad29eeb181de53677aa66dab4b03118ae6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Sync (1).dll
    .dll 1.4MB

Sync (1).dll

  • IMPHASH d74d5e914e2045ca244b342206d0aa79
  • SHA256 a437d7ccc8b9b633f1be051e5c22a8ad29eeb181de53677aa66dab4b03118ae6
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
20:ac:16:02:fc:3a:2c:85:30:85:c4:fe:d6:41:fc:da:1e:10:af:16:9f:6f:0d:c2:c6:3e:58:ac:51:8d:72:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
944788
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\tyougurt\Downloads\PRAJA-IMGUI\x64\Release\Internal MAGIC BULLET.pdb