General

  • Target
    SRUMExplorer++.exe
  • Size 36.3MB
  • Sample261017-rmw39afd36
  • SHA256 babbc35fa3643884d257fde457a4120556c00c0d08526b5c93a4e820f0616713
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • SRUMExplorer++.exe
    .exe 36.3MB

SRUMExplorer++.exe

  • IMPHASH d740621565f3e87e499f8eda7a143893
  • SHA256 babbc35fa3643884d257fde457a4120556c00c0d08526b5c93a4e820f0616713
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:43:ca:16:bf:aa:48:22:fe:d2:1f:85:ef:70:f9:ab:fa:0c:cf:07:95:62:a5:fe:b5:e7:a9:a9:20:93:91:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=detect,O=detect,L=Taunton,C=GB
Minor OS version
0
Major OS version
6
Entry point
32694213
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths