General

  • Target
    a.exe
  • Size 8.6MB
  • Sample260816-phlevaxdqd
  • SHA256 34f9a46e80033a8855b2b2e722245543c07eca8f32981c471e918b26af88e392
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • a.exe
    .exe 8.6MB

a.exe

  • IMPHASH 45e7bd2ef09c000a06dde8f6cd8c5281
  • SHA256 34f9a46e80033a8855b2b2e722245543c07eca8f32981c471e918b26af88e392
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
1406608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n\Desktop\work\suomimania\eu\implant\tools\stego-pack\loader9\bin\Release\net9.0-windows\win-x64\native\msedgewebview2.pdb