General

  • Target
    krx legit v5.1 .dll
  • Size 6.8MB
  • Sample260930-cm2leacd87
  • SHA256 d615c358b86de118424b7afb3d7c2b234b49c179b56a31e703689b17cf1b1d85
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • krx legit v5.1 .dll
    .dll 6.8MB

krx legit v5.1 .dll

  • IMPHASH c9930858f22f2c6a5f223f3aa8de093e
  • SHA256 d615c358b86de118424b7afb3d7c2b234b49c179b56a31e703689b17cf1b1d85
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
b9:fa:00:a5:65:e0:3c:b8:8b:f1:c8:0d:a5:f0:85:d9:7d:4f:df:f8:ba:cf:67:fb:d5:92:8f:a5:cf:9c:7e:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
6692832
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths