General

  • Target
    krx legit v4.dll
  • Size 396KB
  • Sample260824-zwevbstfld
  • SHA256 99b39b2130e9405cc4c8cf33e974b01eb8476ec16c30fbabd5a1c5fba189d200
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • krx legit v4.dll
    .dll 396KB

krx legit v4.dll

  • IMPHASH 2c40c78a629c6cf861e94167b6283a8f
  • SHA256 99b39b2130e9405cc4c8cf33e974b01eb8476ec16c30fbabd5a1c5fba189d200
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
bf:0a:e6:d3:bc:84:f3:f3:40:bd:ae:a6:2e:f8:07:1e:c4:20:72:12:da:71:02:33:08:8b:50:19:dc:78:0e:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
12416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\SLAXY\Desktop\legit\legit\hmm Nice\x64\Release\Internal MAGIC BULLET.pdb