7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

General

Target
7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75
Size 462KB
Sample260916-plcbcat12j
SHA256 7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75
MD5 a9a884495c8f0d4a4aa4b143937ca381
SHA1 1d1b2ff5180a48e095240dac432c15f665b58573
SHA512 4ea709844977af69b277f6736431c39005f224219b4c9db9a79d81f2189e9cf4b32eb13e7e3dfcabbad794991ae51690c6718b06362f28cbd8e9388921160c14
SSDEEP 12288:b0//rtS/EkJDzs/o5T/GMKKWlT1NNdvSos+3lU:w/DtENzsgNeMelNBpl
TLSH
T13EA401AEA1C323FCD8F7D238A6572046FAB775826736AEB7C765812038355A4143DF08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

File Explorer

7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

.dll 462KB

7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

IMPHASH 101e9da62927c83ffbe9363e7b60b054
SHA256 7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75
MD5 a9a884495c8f0d4a4aa4b143937ca381
SHA1 1d1b2ff5180a48e095240dac432c15f665b58573
SHA512 4ea709844977af69b277f6736431c39005f224219b4c9db9a79d81f2189e9cf4b32eb13e7e3dfcabbad794991ae51690c6718b06362f28cbd8e9388921160c14
SSDEEP 12288:b0//rtS/EkJDzs/o5T/GMKKWlT1NNdvSos+3lU:w/DtENzsgNeMelNBpl
TLSH
T13EA401AEA1C323FCD8F7D238A6572046FAB775826736AEB7C765812038355A4143DF08
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_busy_handler sqlite3_busy_timeout sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_collation_needed sqlite3_column_blob sqlite3_column_bytes sqlite3_column_count sqlite3_column_decltype sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_text sqlite3_column_type sqlite3_commit_hook sqlite3_complete sqlite3_config sqlite3_create_collation sqlite3_create_function sqlite3_data_count sqlite3_db_handle sqlite3_enable_load_extension sqlite3_errcode sqlite3_errmsg sqlite3_errstr sqlite3_exec sqlite3_expired sqlite3_extended_errcode sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_load_extension sqlite3_mprintf sqlite3_open sqlite3_open_v2 sqlite3_prepare sqlite3_prepare_v2 sqlite3_reset sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_value sqlite3_set_auxdata sqlite3_snprintf sqlite3_sourceid sqlite3_sql sqlite3_step sqlite3_temp_directory sqlite3_total_changes sqlite3_transfer_bindings sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_text sqlite3_value_type sqlite3_vmprintf sqlite3_wal_checkpoint_v2

Name

.text

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

391KB

Virtual Size

390KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

324B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

kernel32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic

Sharing

General

Malware Config

Signatures

File Explorer

7dc1d7b759944bd31028908b4d0afc254385b24aa2face528cc01c0c71549a75

kernel32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic