General

  • Target

    ged.php.zip

  • Size

    2.2MB

  • MD5

    be45c62c30389b7145320b4429688e50

  • SHA1

    408829ca1e66582f2f83e4640ffda6d08f95978a

  • SHA256

    34e64b1038e0528ab8208a5a03dab4501d942850b0f31ca878e101e9218f6095

  • SHA512

    4e9ed6df29952b322ba088f792a169bfa434bc0027a35e29a65540f5f7217273eb31b7032b7690d518b048035cf03d276b95ea0600d0f7c8d064548dff9f378e

  • SSDEEP

    49152:1Q6J3WM202p5GutgAJuIxyxWCIZnS85PWZ5FvcBt:e89i7JDmWjzP+Ut

Score
1/10

Malware Config

Signatures

Files

  • ged.php.zip
    .zip
  • AudioCapture.dll
    .dll windows x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • PCICHEK.DLL
    .dll windows x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections