General

  • Target
    STVU7IYT.DLL
  • Size 321KB
  • Sample261023-amnnfaaz2m
  • SHA256 f6361b0cb82ee19781f8ddd4ee0512228197b854e32c838b4c8742cf880fb478
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • STVU7IYT.DLL
    .dll 321KB

STVU7IYT.DLL

  • IMPHASH dae02f32a21e03ce65412f6e56942daa
  • SHA256 f6361b0cb82ee19781f8ddd4ee0512228197b854e32c838b4c8742cf880fb478
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
a1:cc:09:5e:d1:50:9e:20:ea:38:fe:e7:78:4a:60:97:91:78:27:f7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
318558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Discovery.pdb