General

  • Target
    aim596089.exe
  • Size 8.1MB
  • Sample260830-2qnldstwct
  • SHA256 4a56acb4f236582af60db6bf4447da526b04aaca7508db1c516aeb5944e8eb38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • aim596089.exe
    .exe 8.1MB

aim596089.exe

  • IMPHASH 81638d02019c0bfcaaf23a9c69f2f12c
  • SHA256 4a56acb4f236582af60db6bf4447da526b04aaca7508db1c516aeb5944e8eb38
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
1b:ff:1f:3c:36:c0:e5:87:f5:a5:1e:80:6e:04:d7:b0
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=America Online\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=AIM Firewall Trust v1,O=America Online\, Inc.,L=Dulles,ST=Virginia,C=US
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths