General

  • Target
    CrimsonMods.exe
  • Size 25.0MB
  • Sample260922-2sfcsshb93
  • SHA256 158019bb020b4efa9df745c86046fe117474d3662b9a5506cd1394d4fb97a30c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • CrimsonMods.exe
    .exe 25.0MB

CrimsonMods.exe

  • IMPHASH 5c006c2c46156150d322d0c3386be4c9
  • SHA256 158019bb020b4efa9df745c86046fe117474d3662b9a5506cd1394d4fb97a30c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
4d:93:79:1e:7d:f9:a9:90:ec:6f:84:4a:5f:18:e9:81:f1:14:0a:2f:dc:6e:d5:bf:d8:64:e7:2b:00:1b:1b:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Environment Block Service Watch,OU=Client Software,O=PineSide Interactive AB,L=Edinburgh,C=GB

PE Signature issue

Digest
48:55:ad:48:f6:63:14:13:b3:12:66:19:d7:bb:5c:cc:da:3e:f1:b1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Environment Block Service Watch,OU=Client Software,O=PineSide Interactive AB,L=Edinburgh,C=GB
Minor OS version
0
Major OS version
6
Entry point
19651875
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths