General

  • Target
    Whatsapp_image_20260721.pdf.img
  • Size 8.2MB
  • Sample260722-jjhsfscc44
  • SHA256 745b84223b450fd185279bd8dab4f71ff149bb832ec147449313dfe7bca55e4c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 4 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Whatsapp_image_20260721.pdf.img
    .iso 8.2MB
  • out.iso
    .iso 8.2MB
  • 1_Whatsapp_image_20260721_003.pdf.exe
    .exe 561KB
  • 2_Whatsapp_image_20260721_002.pdf.exe
    .exe 561KB
  • 3_Whatsapp_image_20260721_001.pdf.exe
    .exe 561KB
  • SspiCli.dll
    .dll 300KB
  • WTSAPI32.dll
    .dll 174KB
  • atom.dll
    .dll 2.7MB
  • encoding-conversion.dll
    .dll 23KB
  • msvcp140.dll
    .dll 540KB
  • root-service-provider.dll
    .dll 850KB
  • ucrtbase.dll
    .dll 1.3MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB

Whatsapp_image_20260721.pdf.img

  • SHA256 745b84223b450fd185279bd8dab4f71ff149bb832ec147449313dfe7bca55e4c
  • MD5 SHA1 SHA512 SSDEEP TLSH