Resubmissions

11/05/2023, 23:15

230511-28rqrsdc4s 9

11/05/2023, 23:04

230511-22hvaadc3t 9

11/05/2023, 22:55

230511-2wjjmadc2t 9

General

  • Target

    infected.zip

  • Size

    18.9MB

  • MD5

    32f8a3b3f80f1cd241f5ed9d8bd55fa8

  • SHA1

    388365c84e2dd3a0682efe6bc05e228bc2aec11b

  • SHA256

    4e66b57ee91495753bd4986781ca3b2ec1234aacaf1b9a93e70fc8ae87b5c05c

  • SHA512

    c5fc59c171be4511961e172f71276069951c59fbec73f344dc3996105fced6c5b7ae7bd86ea7efdaac916081a022c7cce617098b9a162e7250a563f59aef14da

  • SSDEEP

    393216:6YrrZXg/eJQqTWIhFKZOlHGufmnnwN6gUGeVU8NsNO4+uhJWjc0an0F:6Kl7Qw3hFeOXfmnwNFUGS3WOhOJWjc5w

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • infected.zip
    .zip
  • 6.ia
  • MSVCR100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WebView2Loader.dll
    .dll windows x86

    608537c42a46a95b31cc1ef01ab6eeb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • at.mdat
  • b.ai
  • c.at
  • exe.txt
    .exe windows x86

    6ae531f3439aee07e850dbb1ac7115a4


    Code Sign

    Headers

    Imports

    Sections

  • i7.exe
    .exe windows x86

    d3310ce6cbcacb3a9f0809bc33e38abe


    Code Sign

    Headers

    Imports

    Sections

  • jli.dll
    .dll windows x86


    Headers

    Exports

    Sections