General

  • Target
    fdcc5adaf272e158978a13e5276573a7bf3618460a7ef4ed5d044f2d129497f9
  • Size 4.8MB
  • Sample261104-x6ldrazt4m
  • SHA256 fdcc5adaf272e158978a13e5276573a7bf3618460a7ef4ed5d044f2d129497f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • fdcc5adaf272e158978a13e5276573a7bf3618460a7ef4ed5d044f2d129497f9
    .exe 4.8MB

fdcc5adaf272e158978a13e5276573a7bf3618460a7ef4ed5d044f2d129497f9

  • IMPHASH 1f87e8680e89310b4ed86c667ab4f3cb
  • SHA256 fdcc5adaf272e158978a13e5276573a7bf3618460a7ef4ed5d044f2d129497f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
ec:78:bb:6c:3a:e1:de:4e:f8:f0:ea:ed:64:86:6f:4c:d7:bc:66:5d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CN
Minor OS version
0
Major OS version
6
Entry point
2061080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\MyCode\win_agent_tool\win_agent_ext\agent_ext\agent_ext\x64\Release\AgentUI.pdb