General

  • Target
    Among.exe
  • Size 369KB
  • Sample260817-vs2sgawsfw
  • SHA256 a7479c3a4c702f2225a2ed343a8222bb36031f34474bf38d9a61f1a759fe3bf1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • Among.exe
    .exe 369KB

Among.exe

  • IMPHASH 19fdbb9a1f4c6e334c70ad4f32743747
  • SHA256 a7479c3a4c702f2225a2ed343a8222bb36031f34474bf38d9a61f1a759fe3bf1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
c8:ea:7e:c5:f2:ba:e6:0a:08:6e:d2:6d:53:63:ec:7b:72:75:bf:e5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE
Minor OS version
2
Major OS version
5
Entry point
51752
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\jenkins\workspace\Client\PackageInstWindows\build\64\out\Release_x64\package_inst.exe.pdb