General

  • Target
    637e5a8645b96bfddf7cb657d28125768b8e2c2198b8f0aa0220eca7af47f4ad
  • Size 162KB
  • Sample260830-2eppbaaq6x
  • SHA256 637e5a8645b96bfddf7cb657d28125768b8e2c2198b8f0aa0220eca7af47f4ad
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 637e5a8645b96bfddf7cb657d28125768b8e2c2198b8f0aa0220eca7af47f4ad
    .dll 162KB

637e5a8645b96bfddf7cb657d28125768b8e2c2198b8f0aa0220eca7af47f4ad

  • IMPHASH c8d15571c72a30247ee470764f9fa58e
  • SHA256 637e5a8645b96bfddf7cb657d28125768b8e2c2198b8f0aa0220eca7af47f4ad
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
40960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
F:\VMWD\WrightPatch.FULL.WIN32\Bin.Win\Modules.fin\TeamworkServerMonitorClient\Teamwork.ServerMonitorClient.pdb