General

  • Target
    rekordbox.exe
  • Size 95.0MB
  • Sample260816-srkrfsdn8s
  • SHA256 f6359b6b3553e5f81e55444b28b7b56aa6f80f7bb7eb88f3c84d865d821ad5a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • rekordbox.exe
    .exe 95.0MB

rekordbox.exe

  • IMPHASH b98b0fcbb074d34a7c92800d69c929b5
  • SHA256 f6359b6b3553e5f81e55444b28b7b56aa6f80f7bb7eb88f3c84d865d821ad5a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
7e:34:24:09:ce:25:d2:6e:18:49:18:e1:47:7b:f2:f4:ee:75:d2:b0:4b:51:c0:ce:79:df:d0:08:c2:bf:5e:40
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=0104-01-151827,CN=AlphaTheta Corporation,O=AlphaTheta Corporation,L=Yokohama-shi,ST=Kanagawa,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50
Minor OS version
0
Major OS version
6
Entry point
40392700
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\JenkinsHome\workspace\rekordboxdj release\Builds\VisualStudio2022\x64\Release\obj\rekordbox.pdb