General

  • Target
    nigs.dll
  • Size 671KB
  • Sample260816-wpmptatfle
  • SHA256 a67b72b2020318b17fa18381a846ebffb25aa38a5c2463a3cb51d21d25061be8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • nigs.dll
    .dll 671KB

nigs.dll

  • IMPHASH b29ef007fe4605c3954f4098109f59f0
  • SHA256 a67b72b2020318b17fa18381a846ebffb25aa38a5c2463a3cb51d21d25061be8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
8f:e7:19:88:86:e9:c5:1a:df:6e:b4:22:e0:3f:fc:68:63:c7:5e:c1:81:90:1d:26:30:e0:c7:82:fa:e6:e0:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
523440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\v aloo\Desktop\ctxbuild\ctx.pdb