General

  • Target

    sbronk.zip

  • Size

    3.9MB

  • MD5

    cb966221cbe49576547e4073af65cfd9

  • SHA1

    50068cd2a943bb2fb5de4faf870e386ddc884329

  • SHA256

    932bb29b026e76fd69d75478b0a80f63227cbb1883caa42de35856fb50f24680

  • SHA512

    80b93257d53db61f255926315417bfc0177f9c2c2a73d93fa945ccb88a892111cf8771f24aae26defd6d276b8503d0ebf5aaeed0613fdb84aab448456689ef01

  • SSDEEP

    98304:bMbb7+5WJnPcXODEJShjZjZ28FR2XUQLYoZiU5DYa8wMfM+:cb7+KPcfSHZ28QModKq+

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sbronk.zip
    .zip
  • sbronk/Moonlight_Spoofer_v1.2 (1).exe
    .exe windows:6 windows x64


    Headers

    Sections

  • sbronk/msvcp140.dll
    .dll windows:6 windows x86

    da80a601d055c1908586f1fd5977dd58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sbronk/ucrtbased.dll
    .dll windows:10 windows

    54b4bbc2bbb2a373b2dc789e8b1f590f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sbronk/vcruntime140.dll
    .dll windows:6 windows x86

    2262054530b5f8bbeb0c4e3a111a37eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sbronk/vcruntime140_1d.dll
    .dll windows:6 windows x64

    c9ae4ff42740a4fde537f79a493dac0c


    Code Sign

    Headers

    Imports

    Exports

    Sections