General

  • Target

    TextEditor.zip

  • Size

    2.6MB

  • MD5

    237445fdbe7ec80def9a6cb5e61b64bb

  • SHA1

    e4286e5d37681ade97287c5041ac310f22d736d1

  • SHA256

    f76f744efee3b7642d62985ec998e49b5ad117b46ecf2ce0646ea3287e524c24

  • SHA512

    3193e78bdc6c234c3d3dbd2a91aa76a40d387f088080ce13dafd7c7de36b89e0a12685b37c902240e4a62b5bd0f728d548359a2886d1b1c756403a17085d4787

  • SSDEEP

    49152:QbtSywpUzIzQAsd+lA9KiTMh7qM4PCYIdKHN5Te+XN0IT2K6s/Vn+3ZpI3saoC:Qbt+8dpBMh7qMEfqK5ZTr5/sa5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • TextEditor.zip
    .zip
  • TextEditor/Bunifu_UI_v1.52.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • TextEditor/TextEditor 1.2.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • TextEditor/TextEditor/Bunifu_UI_v1.52.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • TextEditor/TextEditor/TextEditor 1.2.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • TextEditor/bornova.100.trendyol.txt