General

  • Target
    njtzac0.tar
  • Size 860KB
  • Sample260911-w2pd6sswfs
  • SHA256 ee264a9ac85435880323e9666bd673c0099fc8ffd3c6b5850291b98953d46169
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • njtzac0.tar
    .dll 860KB

njtzac0.tar

  • IMPHASH 8ce5cf6636b690adc707814c2493aa70
  • SHA256 ee264a9ac85435880323e9666bd673c0099fc8ffd3c6b5850291b98953d46169
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
819403
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
c:\cleanCross\SetMix\valuewhy\Claimbuild\plant.pdb