General

  • Target
    912e6f70db9ba286a54cc10bcafd2229
  • Size 7.7MB
  • Sample240918-a8ebwsvalk
  • SHA256 05b48d0a491fba3c3f794c398dbfd09f73380923f16d2d40ab90befeb16fbd01
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detects HijackLoader (aka IDAT Loader) 1 IoCs
  • Hijackloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 912e6f70db9ba286a54cc10bcafd2229
    .exe 7.7MB

912e6f70db9ba286a54cc10bcafd2229

  • IMPHASH c898e84da8ccad4bdffa3eb808bdefa2
  • SHA256 05b48d0a491fba3c3f794c398dbfd09f73380923f16d2d40ab90befeb16fbd01
  • MD5 SHA1 SHA512 SSDEEP
  • Detects HijackLoader (aka IDAT Loader)

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
5
Entry point
5041872
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths