General
-
Target
New Folder.rar
-
Size
206KB
-
MD5
4f1a198048010bebe6a496c2b6482756
-
SHA1
6faed960f60ee3530dc4b1fb2e49a350c73b2a0e
-
SHA256
4307d5ba77f298c263d302bbfb278ed420d34275d27c4246a9e66a23f7b3b9de
-
SHA512
1e5df281d73e333f1b9352a90c715df2152e9eb564fbd2181fb26108ff6297a346e5848bd19e2b20a3a454884af7d8a674ce1f2c6d4903d81ce23290af14718c
-
SSDEEP
6144:hzJ7QRDRWcIUOVBfGK3K3RWuFj83AKYAP42Y:x5QRDRAVBfl8RL8OY4L
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
New Folder.rar
Password: infected
-
New Folder/Extras/cmdlist.txt
-
New Folder/Extras/encrypt.exe
Password: infected
d37c06b7a012aae518363f1da9c49f07
Headers
Imports
Sections
-
New Folder/Misc.rc
-
New Folder/Misc/buf.txt
-
New Folder/Misc/icon.ico
-
New Folder/Misc/resource.h
-
New Folder/Misc/resources.aps
-
New Folder/Misc/resources.rc
-
New Folder/advscan.cpp
-
New Folder/advscan.h
-
New Folder/aimspread.cpp
-
New Folder/aimspread.h
-
New Folder/asn.cpp
-
New Folder/asn.h
-
New Folder/commands.cpp
-
New Folder/commands.h
-
New Folder/configs.h
-
New Folder/crypt.cpp
-
New Folder/crypt.h
-
New Folder/dcom.cpp
-
New Folder/dcom.h
-
New Folder/ddos.cpp
-
New Folder/ddos.h
-
New Folder/defines.h
-
New Folder/download.cpp
-
New Folder/download.h
-
New Folder/externs.h
-
New Folder/fphost.cpp
-
New Folder/fphost.h
-
New Folder/ftpd.cpp
-
New Folder/ftpd.h
-
New Folder/functions.h
-
New Folder/gecko.dsp
-
New Folder/gecko.dsw
-
New Folder/gecko.ncb
-
New Folder/gecko.opt
-
New Folder/imail.cpp
-
New Folder/imail.h
-
New Folder/includes.h
-
New Folder/info.cpp
-
New Folder/info.h
-
New Folder/ioctlcmd.h
-
New Folder/irc.cpp
-
New Folder/irc.h
-
New Folder/loaddlls.cpp
-
New Folder/loaddlls.h
-
New Folder/lsass.cpp
-
New Folder/lsass.h
-
New Folder/netbios.cpp
-
New Folder/netbios.h
-
New Folder/netdde.cpp
-
New Folder/netdde.h
-
New Folder/netutils.cpp
-
New Folder/netutils.h
-
New Folder/passwd.h
-
New Folder/pnp139.cpp
-
New Folder/pnp139.h
-
New Folder/pnp445.cpp
-
New Folder/pnp445.h
-
New Folder/processes.cpp
-
New Folder/processes.h
-
New Folder/protocol.cpp
-
New Folder/protocol.h
-
New Folder/regcontrol.cpp
-
New Folder/regcontrol.h
-
New Folder/reptile.cpp
-
New Folder/reptile.h
-
New Folder/resource.h
-
New Folder/secure.cpp
-
New Folder/secure.h
-
New Folder/service.cpp
-
New Folder/service.h
-
New Folder/socks4.cpp
-
New Folder/socks4.h
-
New Folder/strings.h
-
New Folder/stub.exe
-
New Folder/threads.cpp
-
New Folder/threads.h
-
New Folder/utility.cpp
-
New Folder/utility.h
-
New Folder/wkssvc.cpp
-
New Folder/wkssvc.h