521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668

General

Target
521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668
Size 119KB
Sample260919-thb9dstxfs
SHA256 521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668
MD5 58ae6a6afd2015903a8a6ade7dd9e022
SHA1 09313084da74996a8169ae0e39d20453af1b0eaf
SHA512 7b958f8fc68a14766b601ff3d2c6fd8be5b026212eb067059b7bf85c728ac109a351d50b2540c0ead8e7c25c99e6230dcdeba5fbe334b4409fd7399b9012659d
SSDEEP 3072:kQRyFt5ovBeHVXvegeQzO9A076LMkEkuIrQOqvBVB:kbXveg3zOwLMkEHGXqHB
TLSH
T191C312663100DF07F7F02684F52370ADA2FE644E29555921CB38ADC8B87B754A5FEC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHide.exe

File Explorer

521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668

.zip 119KB
DHide.exe

.exe 855KB
介绍.html

.html 21KB
使用说明.txt

9KB

521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668

SHA256 521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668
MD5 58ae6a6afd2015903a8a6ade7dd9e022
SHA1 09313084da74996a8169ae0e39d20453af1b0eaf
SHA512 7b958f8fc68a14766b601ff3d2c6fd8be5b026212eb067059b7bf85c728ac109a351d50b2540c0ead8e7c25c99e6230dcdeba5fbe334b4409fd7399b9012659d
SSDEEP 3072:kQRyFt5ovBeHVXvegeQzO9A076LMkEkuIrQOqvBVB:kbXveg3zOwLMkEHGXqHB
TLSH
T191C312663100DF07F7F02684F52370ADA2FE644E29555921CB38ADC8B87B754A5FEC2A
MD5 SHA1 SHA512 SSDEEP TLSH

DHide.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 924ad13555a705b696185d081cd5868db31e4dcf0062792ddd8fa58d79e6f6b3
MD5 66bac2c4abe9294c42cdbdfb4af6715c
SHA1 76fe9aae0f0a0bfa414dde3225f67e8e69a8590b
SHA512 a2a92cbf051f6a95096f1e7bd6564e10819d3a975b5cf5054117c6cb3f92c01d365f3c602ee601c0930b25bd90aede9cdd5c3dc1d629f5cca0a6efc2590cfcee
SSDEEP 6144:FjxzdFlk9I99999+99999999999799999999999E9b+8APlk9I99999+9999999d:Fjx3Q8
TLSH
T15615EDEE9E0B0E0DEF0F587ACAD812C920613E5D5D5685F899D9B8094B34F5DD8F088E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

499838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668

DHide.exe

mscoree

dotnet

介绍.html

使用说明.txt

Sharing

General

Malware Config

Signatures

File Explorer

521e2215a4802811779b6a9f060a8c2e71284c8cdde719da922ea77942d7c668

DHide.exe

mscoree

dotnet

介绍.html

使用说明.txt