General

  • Target

    7238152972aa50e1d4ea0deab965691fa2e7ffb350945d6ebf4caecc93210a7f

  • Size

    8.0MB

  • MD5

    6e3a41a2d9e448377ee666dd9d8930d8

  • SHA1

    3d08383c0c79f51181043d31f257c0ab0510edaa

  • SHA256

    7238152972aa50e1d4ea0deab965691fa2e7ffb350945d6ebf4caecc93210a7f

  • SHA512

    1f69bcdd16ff8fc452ef6ce95426c036c6ae3a7e0733bca969532f1d11ad18f3445be9c4898f45004108bfc91bfbe59e071640e5eedc57c6b3e7a60521bbc679

  • SSDEEP

    196608:RGR6/QDpUJiqe1FO6OqOFcrf5fm2zdhqefhh+91TiX529XgmM8:EY/uqgrbOmrf5fmuhfyWXQgmM8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7238152972aa50e1d4ea0deab965691fa2e7ffb350945d6ebf4caecc93210a7f
    .rar
  • TGear.dll
    .dll windows:5 windows x86

    ad393bb5c6bf3f4e3d4b89c0892ed225


    Headers

    Imports

    Exports

    Sections

  • TdxW.exe
    .exe windows:5 windows x86

    744c3052593392a19cac68ee86a0f967


    Headers

    Imports

    Exports

    Sections

  • ZDPlugins/TdxZdView100.dll
    .dll windows:5 windows x86

    9106825f83ce5cd569b84905f89d8c59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • l2plugin.cfg
  • nbcomte.dat
  • nccomte.dat
  • vipstaf.dat