Overview

overview

3

Static

static

3

e590f62dd5...fd.dll

windows10-2004-x64

1

e590f62dd5...fd.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    e590f62dd563622a487d0bf76a584363ece438dd4d215ee028ec32be2583cffd
  • Size 10.6MB
  • Sample260907-hdtr4afc53
  • SHA256 e590f62dd563622a487d0bf76a584363ece438dd4d215ee028ec32be2583cffd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • e590f62dd563622a487d0bf76a584363ece438dd4d215ee028ec32be2583cffd
    .dll 10.6MB

e590f62dd563622a487d0bf76a584363ece438dd4d215ee028ec32be2583cffd

  • IMPHASH 8ac8d2fb0289ee6d398d395cc9b3830a
  • SHA256 e590f62dd563622a487d0bf76a584363ece438dd4d215ee028ec32be2583cffd
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
69:d0:6b:11:c4:7b:3c:b5:65:b0:eb:09:14:a6:7e:e4:e7:45:ea:b2:99:3b:7a:09:9e:c0:01:3a:6e:02:b5:0d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Taozuhong,L=Shenzhen,ST=Guangdong,C=CN
Minor OS version
0
Major OS version
4
Entry point
4848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL
PDB paths