340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257

Sharing

Copy URL Twitter E-mail

General

Target
340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257
Size 7.8MB
Sample240613-e82jmsxhrm
SHA256 340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257
MD5 6d8864647874badf421e4fb92e49f8e2
SHA1 a3d82b602265309fff350b90779489725fb4ca00
SHA512 e4ad69fb40076bbeb513b1740bade51b92dcfa2f6845872180b745b73e759c4b0c9b94981dbd91d363e4a1d141a19c1e1a2c7ba00e04143a99bcf28779a69cba
SSDEEP 196608:/G35cycLmY1w1/7zJQEpM+S9BdGCw9LKQ:/GJcTt87NQKmFw9+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257

File Explorer

340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257

.dll 7.8MB

340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257

SHA256 340d80c93cc0adb798acbc39ced43947d860de75580223fb5e609544e55ef257
MD5 6d8864647874badf421e4fb92e49f8e2
SHA1 a3d82b602265309fff350b90779489725fb4ca00
SHA512 e4ad69fb40076bbeb513b1740bade51b92dcfa2f6845872180b745b73e759c4b0c9b94981dbd91d363e4a1d141a19c1e1a2c7ba00e04143a99bcf28779a69cba
SSDEEP 196608:/G35cycLmY1w1/7zJQEpM+S9BdGCw9LKQ:/GJcTt87NQKmFw9+
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28907236

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

Size

1.9MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1.1MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1.5MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

248KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

15KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

8KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

272KB

Virtual Size

11.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=8, id=260, version=28117,

count=13, id=259, version=28117,

count=21, id=261, version=28117,

count=6, id=257, version=28117,

count=27, productName=Unmarked objects (old),

count=58, id=260, productName=VS2015 UPD1 build 23506, version=23506,

count=95, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=35, id=260, productName=VS2017 v15.5.2 build 25831, version=25831,

count=188, id=261, productName=VS2017 v15.5.2 build 25831, version=25831,

count=8, id=257, productName=VS2019 v16.4.4 build 28316, version=28316,

count=3, id=199, version=41118,

count=13, id=203, version=65501,

count=2572, id=1, productName=Unmarked objects,

count=19, id=260, productName=VS2019 v16.4.4 build 28316, version=28316,

count=147, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=256, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=258, productName=VS2019 v16.4.4 build 28316, version=28316,