General

  • Target
    644de8cf998451749f2956b9fcaa3646f49a0ba0ca165a7910b8dec4fc89d7eb
  • Size 4.8MB
  • Sample260820-p6l2aade44
  • SHA256 644de8cf998451749f2956b9fcaa3646f49a0ba0ca165a7910b8dec4fc89d7eb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 644de8cf998451749f2956b9fcaa3646f49a0ba0ca165a7910b8dec4fc89d7eb
    .dll 4.8MB

644de8cf998451749f2956b9fcaa3646f49a0ba0ca165a7910b8dec4fc89d7eb

  • IMPHASH a917149cc38d906f166a76a11c270f2f
  • SHA256 644de8cf998451749f2956b9fcaa3646f49a0ba0ca165a7910b8dec4fc89d7eb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d9:27:b9:70:f7:4a:8c:aa:0a:ee:51:8e:f4:f9:56:d3:ce:91:07:23:6e:56:f2:29:3c:73:df:ae:6b:87:4c:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=ybjk,OU=Runbey,O=Runbey LTD.,L=NJ,ST=JS,C=CN,1.2.840.113549.1.9.1=#0c0e6170704072756e6265792e6e6574
Minor OS version
0
Major OS version
6
Entry point
2990384
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
E:\Jenkins\its\workspace\LenovoID\win-native-noop-dynamic\Release\LsfSdk.pdb