General

  • Target
    537821-WT3270921778-20261109.Pdf.exe
  • Size 784KB
  • Sample261109-nbbrdseg88
  • SHA256 b449b477af4d9600038d2f24f6beba5c92e4905ac3b69614a394afbf77e71f08
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 537821-WT3270921778-20261109.Pdf.exe
    .exe 784KB
  • $PLUGINSDIR/System.dll
    .dll 25KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 7KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 14KB
  • Datamedia
    432KB
  • Forrentningens219.jpg
    .jpg 24KB
  • Zooid.jpg
    .jpg 16KB
  • asbestholdigt.txt
    389B
  • beskytterens.adg
    1.9MB
  • dlgende.hen
    4.8MB
  • madonnalike
    32KB

537821-WT3270921778-20261109.Pdf.exe

  • IMPHASH 9be4f90f50c714bc00cc8beb2e137299
  • SHA256 b449b477af4d9600038d2f24f6beba5c92e4905ac3b69614a394afbf77e71f08
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
67:f5:76:72:1a:9e:d4:b4:2c:49:c1:c1:59:33:8b:9c:3b:49:3d:b0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Layouternes,OU=Privateri Untruths\ ,O=Layouternes,C=GB
Minor OS version
1
Major OS version
5
Entry point
17331
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths