Static

static

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    sampvoice.asi
  • Size 3.2MB
  • Sample261023-cvhhhahs5x
  • SHA256 b290356ae21425d1d111056ba7936cf4557a8a4a19445e82fa76bc519e827dcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesign

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • sampvoice.asi
    .dll 3.2MB

sampvoice.asi

  • IMPHASH 6b71b066b862cbfd35d4924c97c044f4
  • SHA256 b290356ae21425d1d111056ba7936cf4557a8a4a19445e82fa76bc519e827dcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx86arch:x86

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
09:9c:3f:a4:3c:66:5c:ef:8e:f8:dc:73:19:70:f0:6c:14:d7:41:1c:49:24:5d:82:12:f7:3c:71:f2:3a:fc:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=OOO MosKlining \"Chistyj Znak\",O=OOO MosKlining \"Chistyj Znak\",POSTALCODE=129010,STREET=per Astrakhanskiy\, d 10,L=Moscow,ST=Moscow,C=RU
Minor OS version
0
Major OS version
6
Entry point
519899
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths