General

  • Target
    7ffa8ceaba695ecb58868eac30c83433b87854f8ef6ba6d97938bbd462d486a9.exe
  • Size 11.5MB
  • Sample261007-cdfycabz2r
  • SHA256 7ffa8ceaba695ecb58868eac30c83433b87854f8ef6ba6d97938bbd462d486a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 7ffa8ceaba695ecb58868eac30c83433b87854f8ef6ba6d97938bbd462d486a9.exe
    .exe 11.5MB

7ffa8ceaba695ecb58868eac30c83433b87854f8ef6ba6d97938bbd462d486a9.exe

  • IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
  • SHA256 7ffa8ceaba695ecb58868eac30c83433b87854f8ef6ba6d97938bbd462d486a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
f8:1c:ac:a3:69:d5:34:e8:47:5c:1d:d1:06:40:0a:5e:23:22:c8:1b:da:4b:22:ad:c5:75:62:fb:1b:53:d2:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Ember Works Analytics,O=Ember Works Analytics,C=US
Minor OS version
1
Major OS version
6
Entry point
414944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths