General

  • Target
    c0d2c6bad5392e6e2fda6a2c19591eedf35cb273c6db302e12ab4098f022fd42
  • Size 20.0MB
  • Sample240412-bw8weabc85
  • SHA256 c0d2c6bad5392e6e2fda6a2c19591eedf35cb273c6db302e12ab4098f022fd42
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

File Explorer

  • c0d2c6bad5392e6e2fda6a2c19591eedf35cb273c6db302e12ab4098f022fd42
    .exe 20.0MB

c0d2c6bad5392e6e2fda6a2c19591eedf35cb273c6db302e12ab4098f022fd42

  • IMPHASH 5fd9536cd15200695d07ceae818f2be8
  • SHA256 c0d2c6bad5392e6e2fda6a2c19591eedf35cb273c6db302e12ab4098f022fd42
  • MD5 SHA1 SHA512 SSDEEP
Digest
e1:fc:b4:a1:b0:14:7c:33:45:7a:ae:5d:0a:c4:a1:24:16:c4:1b:0e:25:de:e8:58:4a:b5:70:1a:72:f2:a8:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Datto Inc,O=Datto Inc,L=Norwalk,ST=Connecticut,C=US
Minor OS version
0
Major OS version
6
Entry point
5902880
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb