General

  • Target

    9ca90a91270488b44be995cd624669f9bc7694c49029bd5a7b371efb7e64667f.zip.zip

  • Size

    14.4MB

  • MD5

    515504aded623f2b72f4f7e8a3567442

  • SHA1

    52ed775be3ce9be1b4d637b5d520103de3859e4c

  • SHA256

    241c60d29cd57a246cb610166644adc1b5e080f4b4559eaad11f26452b7adfc2

  • SHA512

    4d64aceb609942ac6f32d259cdcc5da93b2477104348514dd6c4a58daa047935cbc913f63841cc61d6f0786c1cb0e42652181dc65cad13036b75c765fce5df88

  • SSDEEP

    196608:BjwMJOtGJ4eoWikgUosNekWl/KJUlDh2Av+ZjGTsLavPeiK56EkG1vmwdkRXSxV:ywBoWjBumU90ZRavmi3EB1vmw2ID

Score
3/10

Malware Config

Signatures

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ca90a91270488b44be995cd624669f9bc7694c49029bd5a7b371efb7e64667f.zip.zip
    .zip

    Password: infected

  • 9ca90a91270488b44be995cd624669f9bc7694c49029bd5a7b371efb7e64667f.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    46dd21e3141b4b7b03c4a36384482b42


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • COPYRIGHT
  • InstallFiles
  • InstallFlags
  • OpenSSL-LICENSE
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • delv.exe
    .exe windows:4 windows x86

    bbf966a06f67820fd7f2c53d7ed943a0


    Headers

    Imports

    Sections

  • delv.ilk
  • dig.exe
    .exe windows:4 windows x86

    3079861ebf39e4b26ccf444a0988c6be


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    cf2b1982ffb15a3eebb9bbe8bbf68ae2


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-importkey.exe
    .exe windows:4 windows x86

    91ec2ab75481c48fd14577b29eaf0f74


    Headers

    Imports

    Sections

  • dnssec-importkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    dfa3049c35eba09d81f55319e96e37d9


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    5c922ef0a2d8504897b7fc54fbfd5f39


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    2623a3c86411513ec710359d8498ca88


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    fa0ffc715f5e29a573157bbafa1f4fba


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    dad7a115b18142fb920f2153b250e6fe


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • dnssec-verify.exe
    .exe windows:4 windows x86

    81cc8a4b7747263e6d1bc508f0ee4653


    Headers

    Imports

    Sections

  • dnssec-verify.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    2f5844dc70456cfc379573c38020410d


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    1e65911dd76b3382f6eaeed97dcdebf0


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    013175da3e08027f4c4344375ff472cf


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    3d3af94468b7af26e8518a02eec6220f


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    9394d610be7ece301c5f624ac6dd0d18


    Headers

    Imports

    Exports

    Sections

  • libirs.dll
    .dll windows:4 windows x86

    56a559beef133ff38757495a57d10af8


    Headers

    Imports

    Exports

    Sections

  • libirs.ilk
  • libisc.dll
    .dll windows:4 windows x86

    564b3160b49dbc67780928eb3aac2115


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    b794e5130fdabbcf7ca2e3e43787a11b


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    83e651164ef9338cb95b36f1ebcf3aa2


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    9a30c7c3f20d8a0c1d779ed3da246b7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • mdig.exe
    .exe windows:4 windows x86

    1d6e638f50baeb4db6f029a5f4f2f700


    Headers

    Imports

    Sections

  • mdig.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    fcd67a354edcb3df3a9edbbef803a605


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    174cae0e72237b9595562b0ad827d65e


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named-rrchecker.exe
    .exe windows:4 windows x86

    03befd26a99879fe8ae03fa40f32811d


    Headers

    Imports

    Sections

  • named-rrchecker.ilk
  • named.exe
    .exe windows:4 windows x86

    41878da8b1efb02b46189c914477d7db


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    293d53ba9d2da5e9fbced760d515ced8


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    9911f099c7135097deb932d088911130


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    23587befcc18263d62b37a8cf8eaaa3d


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    c530d58cc37ef1dfcac1d8f33b6c00c2


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    d16656cfe4e8109a53a8cb4600375c90


    Headers

    Imports

    Sections

  • rndc.ilk
  • tsig-keygen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • tsig-keygen.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections