General

  • Target
    LayOut.exe
  • Size 35.1MB
  • Sample261107-zelasae15z
  • SHA256 051d8a62bee13227f1bf24f96071717c1e1bb7db4e10a778449ba49df623c457
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • LayOut.exe
    .exe 35.1MB

LayOut.exe

  • IMPHASH 4a3f44bad71f83b9aebcfeeaa759fed9
  • SHA256 051d8a62bee13227f1bf24f96071717c1e1bb7db4e10a778449ba49df623c457
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
bc:a0:a1:27:5f:21:a8:14:ee:3c:1b:75:57:6f:ac:25:5e:6d:90:a0:2a:d3:74:3b:d4:3d:41:e5:34:d1:cf:ae
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Trimble Inc.,O=Trimble Inc.,L=Westminster,ST=Colorado,C=US
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
6
Entry point
168876
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
LayOut.pdb