Spectral Menu_32-bit.zip
- SHA256 8544cc0c737a9332c5ae9e0fbecb6c7a4a7ffe09337e528d68f043e21b2e398a
Static task
static1
1 signatures
General
- Target Spectral Menu_32-bit.zip
- Size 5.2MB
- Sample261024-mkzn5stwex
- SHA256 8544cc0c737a9332c5ae9e0fbecb6c7a4a7ffe09337e528d68f043e21b2e398a
- MD5 318a8dd031e81fff2cc5ad81197aae70
- SHA1 c3d8c978ed9381ab2efc1b1219d0377edafd1c70
- SHA512 4288fe6647245e0339ba4a40b59ace9f0113c641802a6946eb81bdbd09c3d3a6229d7ee1b0bae63b1f67071b76357bfe1c90d214e42b51bf972341efc9d60628
- SSDEEP 98304:EsmqdhdGxubAU8rMA0lEqeKPL74rR8C3Y8PZWkIMUKKGTgA2IT4a9mxwT:pmqdhdG0UdQTeW+ihREKGTbTP9mo
- TLSH T1C44633C27468AEED2D7F011CE1B4F5B5A8C8380B8A5B6300D61E5FDBB5391D4D0BB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Spectral Menu.dll
File Explorer
-
Spectral Menu_32-bit.zip.zip 5.2MB
-
Spectral Menu.dll.dll 19.0MB
-
dllme.txt57B
Spectral Menu.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2d9c6c5b889bd1526f6190c77174549a80bad94dee3800cec6cfa146004c55b
- MD5 afc7bc26c4e361529efc857fb512c31a
- SHA1 c93850baa4010ae0e43860de7934d58f0e823f64
- SHA512 2fba705b58ae1b895c5fc2cc75eed221bc7448254c3d8cabec7e6d0614cfac5dd9dd09c6ec70332148ec61fd2ea26e4724b83abcbccb64837d95443bd4661a7c
- SSDEEP 393216:ct2RuIp+AqOXDuljqWoiZbOYb9kCSUunH2x5XDMa7ahhUwqMp+Y3r3z4M57II6ZL:42RuIp+AqOXDuljqWoiZbOYb9kCSUunQ
- TLSH T11317A49033F4EA40D940B77183F70A2143EC8ED917A4AA1B5E57F7A1A6903FD7D09B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19881534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19.0MB
Virtual Size
19.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
dllme.txt
- SHA256 2765bb22303e41eb971ecb99e6c6ac13777c4319f1691245f078c732e6864374
- MD5 24606f42dd3d72e90e421a9c4be19b50
- SHA1 27de1402a870b85171bf58544478c3af99b2ca62
- SHA512 12a5775bd978ffc98450a150adea5ad3d8fc47a449514745f9c980cc3af87a7c167046947e39d2e22dfec8d7e72f023391ff47adfed8e794b5a3ae27c47813ee
- TLSH T14F9002AF48B2860105518288D258536E402B9049755484929515482E65E6994D5538A3
- MD5 SHA1 SHA512 TLSH