Resubmissions

06/10/2026, 12:25

261006-plzrmsgv9s

06/10/2026, 12:16

261006-pfjs8sgs9w7

General

  • Target
    postgresql-18.6-5-windows-x64.exe
  • Size 395.7MB
  • Sample261006-plzrmsgv9s
  • SHA256 227e2bc08091b4c2b8338c7d61b11d057f895711480b006f90bfcfcd2410a58a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • postgresql-18.6-5-windows-x64.exe
    .exe 395.7MB

postgresql-18.6-5-windows-x64.exe

  • IMPHASH cc272f87aa756f2f19a14abc2f57121e
  • SHA256 227e2bc08091b4c2b8338c7d61b11d057f895711480b006f90bfcfcd2410a58a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
df:84:62:a6:00:ce:d7:96:ac:91:16:dc:14:38:b4:0f:1e:47:e2:45:4d:8d:28:f9:02:66:55:25:46:55:ba:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=EnterpriseDB Corporation,O=EnterpriseDB Corporation,L=Wilmington,ST=Delaware,C=US
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths