General

  • Target
    ucrtbased.dll
  • Size 1.7MB
  • Sample260825-asm9vsdn6x
  • SHA256 5bfaea141dfee4dfe63a0f332d5701f55a5b45aac23b9c0d7d27d8563b68a0ee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ucrtbased.dll
    .dll 1.7MB

ucrtbased.dll

  • IMPHASH b55fd631afff103d396e8e1df0093baa
  • SHA256 5bfaea141dfee4dfe63a0f332d5701f55a5b45aac23b9c0d7d27d8563b68a0ee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
da:dc:90:fd:41:e1:d5:61:6f:7c:77:52:01:26:70:bf:0e:7b:8e:54:ce:80:83:84:4d:c3:a3:ef:a5:c1:1b:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest
2c:f9:24:42:15:2a:7a:0d:1f:a6:25:7f:c4:75:11:b5:45:82:88:1b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
10
Entry point
169984
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
ucrtbased.pdb