General

  • Target
    ffab7de01331012fa75414b54aa5f96f81a57102d55c4b1b2066e1d55163bd45
  • Size 11.1MB
  • Sample260928-npgjsstwf1
  • SHA256 ffab7de01331012fa75414b54aa5f96f81a57102d55c4b1b2066e1d55163bd45
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • ffab7de01331012fa75414b54aa5f96f81a57102d55c4b1b2066e1d55163bd45
    .exe 11.1MB

ffab7de01331012fa75414b54aa5f96f81a57102d55c4b1b2066e1d55163bd45

  • IMPHASH 3f010d6f7a6ad9b6336e6599869c8d52
  • SHA256 ffab7de01331012fa75414b54aa5f96f81a57102d55c4b1b2066e1d55163bd45
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9f:e8:4d:ac:61:3c:9b:c6:27:13:e1:78:b7:53:94:8e:17:f1:98:fa:6d:77:f4:e1:5b:3b:09:a3:d2:bd:0c:58
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91510107072412418F,CN=IObit Co.\, Ltd.,O=IObit Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
f8:59:c5:9c:f6:0b:8f:dc:d6:8b:17:d5:ef:ae:ba:71:62:9d:01:25
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91510107072412418F,CN=IObit Co.\, Ltd.,O=IObit Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074368656e676475,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
6962436
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths