General

  • Target
    resight-v1.7.exe
  • Size 11.8MB
  • Sample260817-rt355sscnb
  • SHA256 5fb47e0561f15222e9091791a14ab39347439bd566846c538d14bac1f2afc4ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • resight-v1.7.exe
    .exe 11.8MB

resight-v1.7.exe

  • IMPHASH 7012fa7b05b3e12ed2b758704ac85b67
  • SHA256 5fb47e0561f15222e9091791a14ab39347439bd566846c538d14bac1f2afc4ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
0c:d5:95:ed:b2:e5:6a:ec:c3:d4:00:be:13:a9:0d:89:a7:1b:01:a4:2a:1a:20:1b:5d:d1:56:85:d3:a0:e4:88:06:c3:2c:15:ca:0d:79:3d:db:5d:63:46:b4:14:b8:ab
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Download Manager,OU=Client Software,O=GlenGrove Cloud Works AB,L=Manchester,C=GB

PE Signature issue

Digest
8b:c4:cd:62:53:ad:81:a4:8a:99:18:4c:74:26:d3:9f:30:64:bd:76
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Download Manager,OU=Client Software,O=GlenGrove Cloud Works AB,L=Manchester,C=GB
Minor OS version
0
Major OS version
6
Entry point
14955772
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths