pseudomanuscrypt | be94df270acfc8e5470fa161b808d0de1c9e85efeeff4a5d82f5fd09629afa8e

General

Target
be94df270acfc8e5470fa161b808d0de1c9e85efeeff4a5d82f5fd09629afa8e
Size 6KB
Sample231012-cyfs3sce37
SHA256 be94df270acfc8e5470fa161b808d0de1c9e85efeeff4a5d82f5fd09629afa8e
MD5 8074f73f7742309b033676cd03eb0928
SHA1 b062092193dff1948102e3db9752c17b8c69aa7c
SHA512 a60fbb6c307be1c0f8457d72a3d805202afe5e77d43c68888d119b01a7f41a8b644d6c86363de029bcc302e2e3207ba8d1ed9e5aecdb1ea6045bad5535fb2d83
SSDEEP 48:Sohw/sCUdspYtgxD6sulpRqgbat5hpFgwVItN/4PaJ+25It9sRAlrCBk31oZW3UD:+xUedxDrulnLat5h3iEVlroikW23Whx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detects PseudoManuscrypt payload 1 IoCs

loader

resource	yara_rule
sample	family_pseudomanuscrypt

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be94df270acfc8e5470fa161b808d0de1c9e85efeeff4a5d82f5fd09629afa8e

IMPHASH e9fb8f93b76e747125b013f7a11b7489
SHA256 be94df270acfc8e5470fa161b808d0de1c9e85efeeff4a5d82f5fd09629afa8e
MD5 8074f73f7742309b033676cd03eb0928
SHA1 b062092193dff1948102e3db9752c17b8c69aa7c
SHA512 a60fbb6c307be1c0f8457d72a3d805202afe5e77d43c68888d119b01a7f41a8b644d6c86363de029bcc302e2e3207ba8d1ed9e5aecdb1ea6045bad5535fb2d83
SSDEEP 48:Sohw/sCUdspYtgxD6sulpRqgbat5hpFgwVItN/4PaJ+25It9sRAlrCBk31oZW3UD:+xUedxDrulnLat5h3iEVlroikW23Whx
MD5 SHA1 SHA512 SSDEEP

Minor OS version

2

Major OS version

5

Entry point

5232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths