General

  • Target
    6b68ed9377d59bb2aabc9d680b9f08806e31821073d144855ae44b1251c784f3
  • Size 5.6MB
  • Sample261017-m1cvbassez
  • SHA256 6b68ed9377d59bb2aabc9d680b9f08806e31821073d144855ae44b1251c784f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 6b68ed9377d59bb2aabc9d680b9f08806e31821073d144855ae44b1251c784f3
    .dll 5.6MB

6b68ed9377d59bb2aabc9d680b9f08806e31821073d144855ae44b1251c784f3

  • IMPHASH c180b8f12de0cc1878ec2e0f735ea38a
  • SHA256 6b68ed9377d59bb2aabc9d680b9f08806e31821073d144855ae44b1251c784f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
1641180
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
F:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\vmware-vdiskmanager\x64\Release\vmware-vdiskmanager.pdb