General

  • Target
    dee610e225919617c2ba3639664ec1bc39c97708226a6b7af3867af1d6d1d01d
  • Size 168KB
  • Sample260806-e6vy3sx1ex
  • SHA256 dee610e225919617c2ba3639664ec1bc39c97708226a6b7af3867af1d6d1d01d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • dee610e225919617c2ba3639664ec1bc39c97708226a6b7af3867af1d6d1d01d
    .dll 168KB

dee610e225919617c2ba3639664ec1bc39c97708226a6b7af3867af1d6d1d01d

  • IMPHASH fcd6c99872cc7739d35ca35a1f5e7c10
  • SHA256 dee610e225919617c2ba3639664ec1bc39c97708226a6b7af3867af1d6d1d01d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
29414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
C:\PO Source\windows-po_pc11\Binary\Cloud Release\SyncOverlay\X86\POContextMenuHandler.pdb