General

  • Target

    0a1d4e30cbcd547636adb0fe461d60c872774003a0f8e96ec99cc3e1221e63ec.zip.zip

  • Size

    12.0MB

  • MD5

    c420d13f2e791887aba46a7cac17ed4f

  • SHA1

    c73fe093a968f324565d02eaf766f64e2452f126

  • SHA256

    f31c7d3f322f64d198d43c8f94fe5866b3a444747f22d5bb88c1fe9aeefeacc4

  • SHA512

    274835aa78e5d5925c723beb62a622b9fb398674365a15b042d8b74ad2f5cc5e0d5f50f99d221b371ba40a5667543003b58dbb3cd1e81fae67ca7d2d30058693

  • SSDEEP

    393216:oI0CjeUSoAQ2p2+cibKf+Hyz8hOaLjAwbpt:nDjeuAC9fzzxaHJbj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a1d4e30cbcd547636adb0fe461d60c872774003a0f8e96ec99cc3e1221e63ec.zip.zip
    .zip

    Password: infected

  • 0a1d4e30cbcd547636adb0fe461d60c872774003a0f8e96ec99cc3e1221e63ec.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    c85b400a388cde50cd9f4ecf79a285e3


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • dig.exe
    .exe windows:4 windows x86

    b569429960f1fddad6a6ac3e34349fa4


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    f3ab152f5cab15eaab86a18411844b87


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    47cc5d4b52a3ef2ad77ca0e0e348bf12


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    61d33c686e38d73a48d1e049102fadef


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    35d1318a39e32ff3f0c994522b0e4789


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    26ce0a3b3ef01a20944cad27c98cd3fa


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    2e62a4fc7ec2fcaaa03e2d0fd7a48bb1


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    44835a39adf279430e17ff118be23448


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    0755b01173dde82b911b3b382cda583f


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    61a85d0cd58bbee01291ade2fe523838


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    806a12e9dcbfac9aaeda4b2d817e3e62


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    ba5b826794f8ba2929377e29c980df5e


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    21ed18638ae11ca63f4a221902a900c0


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    2753cc2db9f8c4b57c567f0e4b3e03d6


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    e8fad57e4095db8fb1ddec3eb3475234


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    e8fad57e4095db8fb1ddec3eb3475234


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    b54ca9e08354c117b2df1965bd718f1c


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    9246e8506a2b6b7618d9da8ecde5212a


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    f1581ce5c102cc3d09dba1649dd49b73


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • pkcs11-destroy.exe
    .exe windows:4 windows x86

    ee839d33f8a8c2445b39e52869fe5d05


    Headers

    Imports

    Sections

  • pkcs11-destroy.ilk
  • pkcs11-keygen.exe
    .exe windows:4 windows x86

    3e890ced5e4d7d8beb2d691846e26aca


    Headers

    Imports

    Sections

  • pkcs11-keygen.ilk
  • pkcs11-list.exe
    .exe windows:4 windows x86

    bb30b5f23894b7aed8db361f1e6cadd8


    Headers

    Imports

    Sections

  • pkcs11-list.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    b4ccd6003df1e29f19abd9daa57b63df


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    d29956094ff0315371c1d8c3b1594655


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections