General

  • Target
    RealUI_v1.49.207.exe
  • Size 91.7MB
  • Sample261030-n23b2aed54
  • SHA256 17dabbeaf45fc2f5ca3e3242b1dde859783a8897b6d0d20f6401dc31bc8c7199
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • RealUI_v1.49.207.exe
    .exe 91.7MB

RealUI_v1.49.207.exe

  • IMPHASH d42595b695fc008ef2c56aabd8efd68e
  • SHA256 17dabbeaf45fc2f5ca3e3242b1dde859783a8897b6d0d20f6401dc31bc8c7199
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
0c:be:0b:bd:89:10:b3:73:65:cc:00:26:da:c7:cf:da:f4:d1:c2:a1:38:b1:77:8c:7c:2d:23:08:10:8b:30:3d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Pacific Craft Studios,O=Pacific Craft Studios,C=US
Minor OS version
1
Major OS version
6
Entry point
491744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths