General

  • Target
    398da2e951f8287d6aa7e53c1c9c0748a5c39af3353b8af94020036fcb9d5bef.bin.exe
  • Size 3.8MB
  • Sample260829-dysnbafq31
  • SHA256 398da2e951f8287d6aa7e53c1c9c0748a5c39af3353b8af94020036fcb9d5bef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 398da2e951f8287d6aa7e53c1c9c0748a5c39af3353b8af94020036fcb9d5bef.bin.exe
    .exe 3.8MB

398da2e951f8287d6aa7e53c1c9c0748a5c39af3353b8af94020036fcb9d5bef.bin.exe

  • IMPHASH f0ea7b7844bbc5bfa9bb32efdcea957c
  • SHA256 398da2e951f8287d6aa7e53c1c9c0748a5c39af3353b8af94020036fcb9d5bef
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d1:54:cd:7b:dc:00:6a:c4:b0:7b:2a:7d:0d:a4:51:4a:20:f2:da:ac:a8:1e:19:bc:1f:09:32:e3:df:b2:d0:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Golden Field Ventures,O=Golden Field Ventures,C=US
Minor OS version
1
Major OS version
6
Entry point
392352
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths