General

  • Target
    b6430ac1dc4e21243e3163b52e8758116ee687f624a9bf5d5b9041f857b2dbcc
  • Size 3.6MB
  • Sample260720-kl32vaby8j
  • SHA256 b6430ac1dc4e21243e3163b52e8758116ee687f624a9bf5d5b9041f857b2dbcc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • b6430ac1dc4e21243e3163b52e8758116ee687f624a9bf5d5b9041f857b2dbcc
    .dll 3.6MB

b6430ac1dc4e21243e3163b52e8758116ee687f624a9bf5d5b9041f857b2dbcc

  • IMPHASH f942462173278f7203eb9f3f67ae92c6
  • SHA256 b6430ac1dc4e21243e3163b52e8758116ee687f624a9bf5d5b9041f857b2dbcc
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
1705361
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
F:\VIP\UserLogonPay\bin\UserAndPayClient.pdb