Static

static

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    REG KEY ADD.exe
  • Size 506KB
  • Sample261104-yzgyesvsds
  • SHA256 24931d7a40cdb991e75e313cd5eb36ac2ad8dc253f6425b49ea9b83996aa9c34
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • REG KEY ADD.exe
    .exe 506KB

REG KEY ADD.exe

  • IMPHASH e2a1496c94d52a035fe47259ee6587b7
  • SHA256 24931d7a40cdb991e75e313cd5eb36ac2ad8dc253f6425b49ea9b83996aa9c34
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
6a:bf:14:df:30:0d:1f:05:31:18:77:0a:18:0d:e5:71:e1:58:69:9e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BobDule-Audio-Dev
Minor OS version
2
Major OS version
5
Entry point
149424
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb