General

  • Target
    90d9d3cbcafd1af640b2ab3d4353de96d6a9cf52bafca28605c320c98a690e68
  • Size 70.0MB
  • Sample260910-31n6cazthw
  • SHA256 90d9d3cbcafd1af640b2ab3d4353de96d6a9cf52bafca28605c320c98a690e68
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 90d9d3cbcafd1af640b2ab3d4353de96d6a9cf52bafca28605c320c98a690e68
    .exe 70.0MB

90d9d3cbcafd1af640b2ab3d4353de96d6a9cf52bafca28605c320c98a690e68

  • IMPHASH 753845d2c9ef7d478e4225bf1d78584a
  • SHA256 90d9d3cbcafd1af640b2ab3d4353de96d6a9cf52bafca28605c320c98a690e68
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
17:bb:71:23:3e:0b:f1:c1:04:71:e8:ec:e4:86:6f:79:21:5f:20:12:99:b9:66:aa:fd:f7:0d:63:62:16:35:9f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=pCloud International AG,O=pCloud International AG,ST=Zug,C=CH
Minor OS version
0
Major OS version
6
Entry point
6094256
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb