General

  • Target
    VisualStudioSetup.exe
  • Size 4.2MB
  • Sample260916-tblt9adj3s
  • SHA256 8af93a0d73a0d0a04d5602337017d0ab87cf390e20e881051cac8f62e93b54e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • VisualStudioSetup.exe
    .exe 4.2MB

VisualStudioSetup.exe

  • IMPHASH f7ac7099f7da46a6a84119e000454199
  • SHA256 8af93a0d73a0d0a04d5602337017d0ab87cf390e20e881051cac8f62e93b54e7
  • MD5 SHA1 SHA512 SSDEEP TLSH

PE Signature issue

Digest
0e:01:68:ad:a1:0c:ac:45:61:06:a5:e6:8c:c1:ff:4f:2f:52:b7:20:89:61:25:06:51:b5:25:2a:64:f2:39:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
NO CERTIFICATE
Chains

Jan 1, 0001

Digest
0e:01:68:ad:a1:0c:ac:45:61:06:a5:e6:8c:c1:ff:4f:2f:52:b7:20:89:61:25:06:51:b5:25:2a:64:f2:39:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
1
Major OS version
5
Entry point
122976
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\_work\1\s\bin\BoxStub\Release\Win32\boxstub.pdb