Overview

overview

7

Static

static

3

249592c257...8b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    249592c25783458785c7558d41325a70998ae020793d35e8df343a1b7af3b48b
  • Size 968KB
  • Sample260916-191jmafa33
  • SHA256 249592c25783458785c7558d41325a70998ae020793d35e8df343a1b7af3b48b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
installer

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer

File Explorer

  • 249592c25783458785c7558d41325a70998ae020793d35e8df343a1b7af3b48b
    .exe 968KB

249592c25783458785c7558d41325a70998ae020793d35e8df343a1b7af3b48b

  • SHA256 249592c25783458785c7558d41325a70998ae020793d35e8df343a1b7af3b48b
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:1windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

    installer

PE Signature issue

Digest
19:65:c7:40:bd:30:fd:ec:cc:3d:5f:e3:fa:2f:f9:18:3d:c3:66:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=AVSoftware Ltd,O=AVSoftware Ltd,L=Sofia,C=BG
Minor OS version
0
Major OS version
1
Entry point
42488
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths