General

  • Target
    d3a6bb2e83f4c58a4ed5fcb512a8e7e1fe5a65b6fd1888454b054ce83b78a23a
  • Size 5.8MB
  • Sample261014-ps5aps119k
  • SHA256 d3a6bb2e83f4c58a4ed5fcb512a8e7e1fe5a65b6fd1888454b054ce83b78a23a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • d3a6bb2e83f4c58a4ed5fcb512a8e7e1fe5a65b6fd1888454b054ce83b78a23a
    .dll 5.8MB

d3a6bb2e83f4c58a4ed5fcb512a8e7e1fe5a65b6fd1888454b054ce83b78a23a

  • IMPHASH c180b8f12de0cc1878ec2e0f735ea38a
  • SHA256 d3a6bb2e83f4c58a4ed5fcb512a8e7e1fe5a65b6fd1888454b054ce83b78a23a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
1641572
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
F:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\vmware-vdiskmanager\x64\Release\vmware-vdiskmanager.pdb