General

  • Target
    6e81c7b00c542311d6856a92f7d54ea2259d109e417d13e5f30eeece976e4598
  • Size 7.2MB
  • Sample261027-v1trtsfx2j
  • SHA256 6e81c7b00c542311d6856a92f7d54ea2259d109e417d13e5f30eeece976e4598
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 6e81c7b00c542311d6856a92f7d54ea2259d109e417d13e5f30eeece976e4598
    .dll 7.2MB

6e81c7b00c542311d6856a92f7d54ea2259d109e417d13e5f30eeece976e4598

  • IMPHASH 96482e05650352d8c3df4792ff58fa9d
  • SHA256 6e81c7b00c542311d6856a92f7d54ea2259d109e417d13e5f30eeece976e4598
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
503480
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
E:\dd\vctools\vc7libs\ship\atlmfc\FrameViewKMDServiceContainerPlugin_x64\x64\Release\FrameViewKMDServiceContainerPlugin_x64.pdb