OverlayPluginAddon-0[.]1[.]0[.]zip

General

Target
OverlayPluginAddon-0.1.0.zip
Size 23KB
Sample261102-ksgr7assat
SHA256 161f862ffb5d8a4f756a57e808acf66133221cae7d5a519487f9282b95e1e595
MD5 a93ff5c1ae77d804937991cb0d50b856
SHA1 3d3739f0bbb722af8f18d92fb8dae31c5f01b899
SHA512 5c084f2e2e420410af0bee3af9e5db5fae1d60408d5fbe506b9ce1edb0eb2d3bc1fe6eef6b56518a40e9383d891f92e5961d8d86f281c145816820aab3621779
SSDEEP 384:XmB0hx7PxlGhlCOB/kCeoJ75c8fypkBNRgGgcgFTWzixDNmIk10IxggZsAMpeV:XrX7pGLB/JuiyggGgcgdWzixDNm7gBlm
TLSH
T13FB2E183E4D64063D4B5F33ED51F0E97828B00D74D94B6951DAD4493393BBE2BDAA424
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OverlayPluginAddon/OverlayPluginAddon.dll

File Explorer

OverlayPluginAddon-0.1.0.zip

.zip 23KB
OverlayPluginAddon/OverlayPluginAddon.dll

.dll 45KB
OverlayPluginAddon/data/actions.json

17KB

OverlayPluginAddon-0.1.0.zip

SHA256 161f862ffb5d8a4f756a57e808acf66133221cae7d5a519487f9282b95e1e595
MD5 a93ff5c1ae77d804937991cb0d50b856
SHA1 3d3739f0bbb722af8f18d92fb8dae31c5f01b899
SHA512 5c084f2e2e420410af0bee3af9e5db5fae1d60408d5fbe506b9ce1edb0eb2d3bc1fe6eef6b56518a40e9383d891f92e5961d8d86f281c145816820aab3621779
SSDEEP 384:XmB0hx7PxlGhlCOB/kCeoJ75c8fypkBNRgGgcgFTWzixDNmIk10IxggZsAMpeV:XrX7pGLB/JuiyggGgcgdWzixDNm7gBlm
TLSH
T13FB2E183E4D64063D4B5F33ED51F0E97828B00D74D94B6951DAD4493393BBE2BDAA424
MD5 SHA1 SHA512 SSDEEP TLSH

OverlayPluginAddon/OverlayPluginAddon.dll

SHA256 4f912f1dc99e61a1786185a64f439d8414f8f619bb8d8a7bacd1be6fdfec408b
MD5 a5653ffffcedddce252c26b34338025a
SHA1 036d55dbd810cd69172a0053c7ee522e6c6347bd
SHA512 7c4a73f2992b47572155dd1acc1dedf67c19c9ee085b5890ee51ef36dad2cffbdf03052c762f01816565fc0c0297e494c8e7389fbb935d75b0ccfa61000f83f4
SSDEEP 768:BXJf+vqjhgk9AM0Fhvm1CBsITLLYfiWgxZwANP2cyERNjKng8s4KTa:B9+bzjm1AsITLagjJIgwOa
TLSH
T13223F68863DD4249EEFE1E7D24B141110B77BD5A9D32D3DD1E8CA0EA0B67B109920B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\OverlayPluginAddon\OverlayPluginAddon\OverlayPluginAddon\OverlayPluginAddon\obj\Release\net48\OverlayPluginAddon.pdb

Sharing