General

  • Target

    bulkmail - 1234.rar

  • Size

    12.6MB

  • MD5

    31fe69edb549300eaa8c954319049bf6

  • SHA1

    1d28c9dfbbb13e92d9f612c7af67c13871f6fa3e

  • SHA256

    4c7833e172b3ddfbc17cacd82c9743657585a5c12333754277c0df79caee00cd

  • SHA512

    2f7d1a72f4d42d8c01f8038150d217ea8fe97d8fa55f93b56baa46f62fe35c5fabfb875a8cceb566c243d1f3c1c5bd6d967258efec64b9140ec363e6c4c5779f

  • SSDEEP

    393216:BdLA+hIHsTpnjppgjKU8Pm7jX/bq162ynGIBsCF:7AvHsTpjPgjd8Cb/bjL1BsCF

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • bulkmail - 1234.rar
    .rar

    Password: 1234

  • DismCore.dll
    .dll regsvr32 windows x64

    Password: 1234

    09a1c4e839108dde1bc43674480edf36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GameApp.dll
    .dll windows x86

    Password: 1234

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MACDll.dll
    .dll windows x86

    Password: 1234

    891a11d9518776b9cee83188e5811c84


    Headers

    Imports

    Exports

    Sections

  • bulkmail.exe
    .exe windows x64

    Password: 1234

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • crckW4re/CRClient.dll
    .dll windows x64

    Password: 1234

    993ec3d9312ac10f54052edf6ed89028


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • napipsec.dll
    .dll windows x86

    Password: 1234

    42010a89ce0b947bb7241c3fc4cdaeed


    Headers

    Imports

    Exports

    Sections

  • readME.txt