General

  • Target

    3b230f6eb97cd146f257c3b0e23fa21bb2c1aca2b56ffb8145882f1ba5923681.zip.zip

  • Size

    13.3MB

  • MD5

    67b386958ae3052992a0a6ba9b4c7410

  • SHA1

    3caf66ee556698486a17061b21251f7edae43b7f

  • SHA256

    393f21976f701222101861be7aec7d3a30c367d30befaed29dfbb45e777f2682

  • SHA512

    e40b3da7dde9f3220e6d17cac753d9ba0f91c680d3f22bdfbbf9553f652d1c97e847e1bd5a2605a6152d9e1a0f33da4d041270cf6bb710692d95152a3699f7c1

  • SSDEEP

    196608:Nc6wMXRmKf+qeHXMv6a4NBCIkzwL9G1pMqsf6ORgyvQTR74I4mN+YVirdmd:q6VYKfL4MESJD1cf6xhRcKiZ4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 35 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b230f6eb97cd146f257c3b0e23fa21bb2c1aca2b56ffb8145882f1ba5923681.zip.zip
    .zip

    Password: infected

  • 3b230f6eb97cd146f257c3b0e23fa21bb2c1aca2b56ffb8145882f1ba5923681.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    734481da86c765bd675bb4f9e84467e8


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    5a3470c4409c572ef4db60302d4479a4


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • dig.exe
    .exe windows:4 windows x86

    d6af3a8d015a280b1394ef2a486e2320


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    76cfe10913747513d4aec1894a48f8f1


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-importkey.exe
    .exe windows:4 windows x86

    701bd23db482a185499584663f31c17f


    Headers

    Imports

    Sections

  • dnssec-importkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    bfa558c7fbd076ca5a48ab2c83c27cdf


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    d43ec6b5183f5e23d1a670c1649205e3


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    500b8a1b7e34fb57da541812982f01e5


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    5785d452d0f7f7741af21ab2b07a0fd8


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    ef0c9308a6a71057c113c95f879ba60d


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • dnssec-verify.exe
    .exe windows:4 windows x86

    68e33015ceab06d4279d2155f5b04558


    Headers

    Imports

    Sections

  • dnssec-verify.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    dd849833d0ad8fddd9767c382bc85fe5


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    efb1bb7a53693592ab7f04baaa4fc99d


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    3acece8b62ceea01cd2dc051e7a5cb04


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    6803e9aaf374b0502d1c5a496af682e0


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    1a59de233e1151ce6cd72e570605e2a5


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    432860c4495f1e39ea563534f10ce0d6


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    a9a20a62e309e703ed8fafae4c2e7252


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    ba96c70f623d30088bdddec21fecea53


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    8ec1353add91c97e7a3d765e61f4faed


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    dd25e8ff14bf8431f8357cc11da48b2b


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    588c9398c4201e8bfcc79a0dfaef2e77


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    588c9398c4201e8bfcc79a0dfaef2e77


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    174cae0e72237b9595562b0ad827d65e


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named-rrchecker.exe
    .exe windows:4 windows x86

    c9b3ece1711bf0db720a03bd411cb2a8


    Headers

    Imports

    Sections

  • named-rrchecker.ilk
  • named.exe
    .exe windows:4 windows x86

    5595a81f2be9708faba86a6bfa03f0ae


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    eff677048c942b4b6a6dbc44ce1b9950


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    608703dbc0c176fa73db0aa608cb3721


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    54709878fd866b38a97409504591ca57


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    f3f17cd09bfdd3f527b5970da06f9b79


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    a927fa73fbb5c530372c48c3c927ffde


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections