General

  • Target

    Advanced_IP_Scanner (4).zip

  • Size

    5.4MB

  • MD5

    cd8af6fd729a93c219ac4b9eba8a43a4

  • SHA1

    c39847ba97b3c006dc8150f6b147a2d57f55a8c3

  • SHA256

    4870085bf9936395a924fe023ca4e1bbe6fb76fb7cabbbfdb35db47f6e1971d5

  • SHA512

    3f66fa8b1147afca7f5c9cdeb22589e814e308b6158aa28e490a88e8e9a3973ae6dd51ebed753f47e53897607cf9cb4c40dd6b2bce9d3cce186bca17287f53a2

  • SSDEEP

    98304:2lasw6NNS70rTxG/UvnWfiNQeOEx77cVBJo7Sxdbg1j67/NgOZ1xS7b/eHw:2lpNNSArWUvnjQqxgBmuY1j6pgoxSP2Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Advanced_IP_Scanner (4).zip
    .zip
  • Advanced_IP_Scanner.exe
    .exe windows:4 windows x86

    013b5b8276709c2ecd2887fac380e33f


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • Microsoft.VC80.MFCLOC.manifest
    .xml
  • http_dll.dll
    .dll windows:4 windows x86

    e741cd0919fe3a9d075f43a89ce7cb10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc80u.dll
    .dll windows:4 windows x86

    4ca444b09cab86ae48fe835cb05c6e94


    Headers

    Imports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • townspeople.7z
    .png