General

  • Target
    90b08e4ff576704b995135a4de5afd153050e19c87c631adfdbc9fa88437a7a3
  • Size 636KB
  • Sample260831-qbgnraap21
  • SHA256 90b08e4ff576704b995135a4de5afd153050e19c87c631adfdbc9fa88437a7a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 90b08e4ff576704b995135a4de5afd153050e19c87c631adfdbc9fa88437a7a3
    .exe 636KB

90b08e4ff576704b995135a4de5afd153050e19c87c631adfdbc9fa88437a7a3

  • SHA256 90b08e4ff576704b995135a4de5afd153050e19c87c631adfdbc9fa88437a7a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
09:10:4e:63:61:07:b9:55:23:76:3e:44:0b:5a:f4:74:47:04:8d:45:76:54:bf:60:e0:e2:65:4b:7d:1e:db:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Folder Switch,OU=Software Publishing,O=PineSide Peak Software,L=Toronto,ST=ON,C=CA

PE Signature issue

Digest
f2:b7:c1:8f:e8:ce:7b:ff:88:07:3c:7a:e7:5e:64:2f:33:54:9e:75
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Folder Switch,OU=Software Publishing,O=PineSide Peak Software,L=Toronto,ST=ON,C=CA
Minor OS version
0
Major OS version
4
Entry point
7168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths