General

  • Target
    er1onm9pqr2ecn49.exe
  • Size 484KB
  • Sample261030-wst83afb48
  • SHA256 24426363f860a2e9968dc04158b791e6ca8f3b1d1f2725ba31685a8010be348a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • er1onm9pqr2ecn49.exe
    .exe 484KB

er1onm9pqr2ecn49.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 24426363f860a2e9968dc04158b791e6ca8f3b1d1f2725ba31685a8010be348a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
cb:d3:2a:5a:de:72:fa:af:82:f4:41:f3:e2:12:dc:46:9c:b0:65:44:f4:df:b3:db:d4:51:db:9c:f7:24:90:19
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Sysdig\, Inc.,O=Sysdig\, Inc.,ST=California,C=US
Minor OS version
0
Major OS version
4
Entry point
491870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths