General

  • Target
    70e3084d6a1c190a40602559fc4080bdecb4af9d9c085bfd92af87a72488cd7a
  • Size 634KB
  • Sample261011-e68j6sdy5n
  • SHA256 70e3084d6a1c190a40602559fc4080bdecb4af9d9c085bfd92af87a72488cd7a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 70e3084d6a1c190a40602559fc4080bdecb4af9d9c085bfd92af87a72488cd7a
    .exe 634KB
  • $PLUGINSDIR/EnVar.dll
    .dll 11KB
  • $PLUGINSDIR/System.dll
    .dll 29KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • bfieldplugin.so
    .dll 166KB
  • lammps.ico
    204KB

70e3084d6a1c190a40602559fc4080bdecb4af9d9c085bfd92af87a72488cd7a

  • IMPHASH 5a558123f19bf165866153ecd38a0280
  • SHA256 70e3084d6a1c190a40602559fc4080bdecb4af9d9c085bfd92af87a72488cd7a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
19094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths