General

  • Target

    Searchesfox.zip

  • Size

    11.9MB

  • MD5

    2e32e5b47070f3a636621d63f933e2c5

  • SHA1

    850e8038406effb64d70722b5bef584662908dc5

  • SHA256

    ab277229874e0f83a174118c013121dce99eb9401a870903aeb100c3ffb52447

  • SHA512

    0a42ddfc2babe4dcbdf7f17ad965352cf796e39545615edb4b0b9a2160927b67182906abc4a669e008fca0f97ebd40ad79fbe49028447922779e9127f24b4a7b

  • SSDEEP

    196608:tCbbKXyqvEVQZ4fAyFGjZurd8hXKgcrJQGc8Ecto0GBudmx6k8vKYS7XeGH70n2h:tc+Xy2QvNoj/gQD2i0GVx0vKYSiw70n+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Searchesfox.zip
    .zip

    Password: infected

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/BPVTPREF.COUNT
  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/Foolish.dat
    .7z
  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/Foolish.exe
    .exe windows:4 windows x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Code Sign

    Headers

    Imports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/Foolish.png
  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/MSVCP100.dll
    .dll windows:5 windows x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/MSVCP120.dll
    .dll windows:6 windows x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/MSVCR100.dll
    .dll windows:5 windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/MSVCR120.dll
    .dll windows:6 windows x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/gcclient.dll
    .dll windows:5 windows x86

    44e237b143424cdaec91290666f2787b


    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/gclient_wrap.dll
    .dll windows:5 windows x86

    62877618dcce1c5bba7c6bc47dd29fd8


    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/libcef.dll
    .dll windows:6 windows x86

    c7656b767c308c1b42bbb0c2ee50cc67


    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/libtim.dll
    .dll windows:5 windows x86

    fbbe96b1970382f3550b72a4d5a4eb77


    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/svchost.exe
    .exe windows:5 windows x86

    2dc9e8080d5727e7a8b8e5451d9214d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/ygoclient.dll
    .dll windows:5 windows x86

    d9072c475cc58f9ea3831babba5586d5


    Headers

    Imports

    Exports

    Sections

  • Searchesfox/TM1WrV1XbeNUB8c0hKzcKcXQSlx8jmE0ei7PeH5uLo/zip_tool.dll
    .dll windows:6 windows x86

    121e36013bd81121d5e6abc01ea35b77


    Headers

    Imports

    Exports

    Sections