General

  • Target
    Property for Sale.exe
  • Size 11.0MB
  • Sample260919-h6dataxyhx
  • SHA256 0b3e355628dc1c30a9ee978414ce9d2c0add859921fd6de351b34d745e3c4d4c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Property for Sale.exe
    .exe 11.0MB

Property for Sale.exe

  • IMPHASH 6ad09e48a45d32e0ebb5e19dd4196c50
  • SHA256 0b3e355628dc1c30a9ee978414ce9d2c0add859921fd6de351b34d745e3c4d4c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
4e:bb:2d:eb:e3:2a:d9:da:8b:0d:45:02:27:27:60:3e:73:bb:3c:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Take-Two Interactive Software\, Inc.,OU=Rockstar Games+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Take-Two Interactive Software\, Inc.,L=New York,ST=New York,C=US
Minor OS version
0
Major OS version
6
Entry point
4368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths