General

  • Target
    MemTest64.exe
  • Size 3.1MB
  • Sample260930-qfnymaxx7k
  • SHA256 e0e3e405f90a44fedef0ccc0b428c65e753d39df7963c3c23fe3ae77d36971f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • MemTest64.exe
    .exe 3.1MB

MemTest64.exe

  • IMPHASH 9a78d5057628e10f8665afa9485384fc
  • SHA256 e0e3e405f90a44fedef0ccc0b428c65e753d39df7963c3c23fe3ae77d36971f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
bb:e3:af:34:3a:db:8a:ce:e1:78:04:ba:52:d7:1b:65:6e:df:22:b2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TechPowerUp Ltd,O=TechPowerUp Ltd,L=Hong Kong,ST=Hong Kong,C=HK
Minor OS version
2
Major OS version
5
Entry point
1751108
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\depot\MemTest64\Release\MemTest64.pdb