General

  • Target
    d5f72eda49b0f1629a9cc62bf6aebef979ff1e869eae5682b031906d3d9b2100
  • Size 14.4MB
  • Sample261002-e8rdnsvz7n
  • SHA256 d5f72eda49b0f1629a9cc62bf6aebef979ff1e869eae5682b031906d3d9b2100
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • d5f72eda49b0f1629a9cc62bf6aebef979ff1e869eae5682b031906d3d9b2100
    .exe 14.4MB

d5f72eda49b0f1629a9cc62bf6aebef979ff1e869eae5682b031906d3d9b2100

  • IMPHASH 2a172ddbb594d62948aa5fa5d6208a90
  • SHA256 d5f72eda49b0f1629a9cc62bf6aebef979ff1e869eae5682b031906d3d9b2100
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
77:b2:a2:6b:c0:b5:b3:2d:6a:8b:b6:b3:7e:ba:7c:a3:0b:0e:b4:78:9f:a1:91:c4:da:41:12:97:27:3d:8a:1b:a7:95:0f:77:3f:eb:33:6b:2a:2d:26:c3:a2:ee:b5:4c
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Background Worker for Disk,OU=Application Services,O=GoldField Digital LLC,L=Prague,C=CZ

PE Signature issue

Digest
09:43:24:2d:2c:33:bc:34:88:81:6f:fa:a8:36:ae:68:5a:f9:19:34
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Background Worker for Disk,OU=Application Services,O=GoldField Digital LLC,L=Prague,C=CZ
Minor OS version
0
Major OS version
6
Entry point
9407445
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths