General

  • Target
    amtrucks.exe
  • Size 50.7MB
  • Sample261024-c513laht2q
  • SHA256 05433078e8776733da6099e8526bc64a91e7e9481cf4e7909b5a9302daa2dfe4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • amtrucks.exe
    .exe 50.7MB

amtrucks.exe

  • IMPHASH 8ab49e0e5509d6afa76edb113c1001b7
  • SHA256 05433078e8776733da6099e8526bc64a91e7e9481cf4e7909b5a9302daa2dfe4
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
ec:7e:e7:e0:e8:aa:3d:b6:ef:53:32:69:8a:32:c7:58:f4:f7:69:93:0b:0e:1e:12:17:90:93:b0:25:6c:0b:06
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=SCS Software s.r.o.,O=SCS Software s.r.o.,L=Praha,C=CZ
Minor OS version
0
Major OS version
6
Entry point
30538932
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\buildbot\slaves\win_slave\final_build_ats_161_windows_bin_steam_x64\build\prism\obj\x64\amtrucks\Steam\amtrucks\exe_ats\amtrucks.pdb