General

  • Target
    6a7e6d75dcb97e009ad5b5ac67e780a56b1fdade1b8d6377ab48b51aedc26ff8
  • Size 13.2MB
  • Sample261102-jmpeeaf14t
  • SHA256 6a7e6d75dcb97e009ad5b5ac67e780a56b1fdade1b8d6377ab48b51aedc26ff8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 6a7e6d75dcb97e009ad5b5ac67e780a56b1fdade1b8d6377ab48b51aedc26ff8
    .exe 13.2MB

6a7e6d75dcb97e009ad5b5ac67e780a56b1fdade1b8d6377ab48b51aedc26ff8

  • IMPHASH 914a82ba89993b76aeb57a6a395dc9de
  • SHA256 6a7e6d75dcb97e009ad5b5ac67e780a56b1fdade1b8d6377ab48b51aedc26ff8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
ae:26:db:f3:d4:a3:c9:9d:85:e5:a3:bf:c6:4c:85:b3:bc:31:37:53
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,OU=IT,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b5b7e6b8afe58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
2
Major OS version
5
Entry point
18495775
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths