General

  • Target
    b71363ce80f68c4d701005968ee0ae25c79f2719902a32e2e6481b2df5e58888
  • Size 1.8MB
  • Sample261110-vpd71aha69
  • SHA256 b71363ce80f68c4d701005968ee0ae25c79f2719902a32e2e6481b2df5e58888
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • b71363ce80f68c4d701005968ee0ae25c79f2719902a32e2e6481b2df5e58888
    .dll 1.8MB

b71363ce80f68c4d701005968ee0ae25c79f2719902a32e2e6481b2df5e58888

  • IMPHASH 830dae4bc5dcd9b5cc4fa229587431f7
  • SHA256 b71363ce80f68c4d701005968ee0ae25c79f2719902a32e2e6481b2df5e58888
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
1206272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths
C:\Users\zhangyunsheng\Desktop\dll\Release\HKFPModuleSvr.pdb