General

  • Target

    2f0ae3cb95c8b65daf8ebec7865169d1c0c6722b208541921c78f2dd05d0772d_JC.zip

  • Size

    8.7MB

  • MD5

    bdbf8d80447588e3a6a9208cf883a13b

  • SHA1

    7f720a87f75b7f18ca77bba0bce75bf4f1ecea43

  • SHA256

    2f0ae3cb95c8b65daf8ebec7865169d1c0c6722b208541921c78f2dd05d0772d

  • SHA512

    904e554151a10fab598857e7321fce2fdfed7dd3b909e1f0c5195041fcad1ad7f295789e958858c51c2c632e4176586f1a1af9d0094946ad620f2974b547e48a

  • SSDEEP

    196608:gqI6NjbDVdSjAuxz1zwiHdvAChpN5xsnHPLkDz8S5WWfzF757wGI7hZ7:9j1bDVdSjkwdvAuxsvLkDzAqd57c7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f0ae3cb95c8b65daf8ebec7865169d1c0c6722b208541921c78f2dd05d0772d_JC.zip
    .zip

    Password: infected

  • 7zxa.dll
    .dll windows:4 windows x64

    e84ea73d0d9b417a1bc1810c7b836d4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Default.SFX
    .exe windows:5 windows x86

    0ae9e38912ff6bd742a1b9e5c003576a


    Headers

    Imports

    Sections

  • Default64.SFX
    .exe windows:5 windows x64

    020387d10d5936b3fbcfc8b4ba421f7b


    Headers

    Imports

    Sections

  • Descript.ion
  • License.txt
  • Software.exe
    .exe windows:5 windows x86

    231ae748dbc4fa94aca4a2ab6a3f3a91


    Headers

    Imports

    Sections

  • Temp/lang.ar.ini
  • Temp/lang.cs.ini
  • Temp/lang.de.ini
  • Temp/lang.en.ini
  • Temp/lang.es.ini
  • Temp/lang.fa.ini
  • Temp/lang.fi.ini
  • Temp/lang.fr.ini
  • Temp/lang.he.ini
  • en-US/hmmapi.dll.mui
    .dll windows:10 windows x86


    Headers

    Sections

  • en-US/ieinstal.exe.mui
    .dll windows:10 windows x86


    Headers

    Sections

  • en-US/iexplore.exe.mui
    .dll windows:10 windows x86


    Headers

    Sections

  • libGLESv2.dll
  • updater.ini