General

  • Target

    1.zip

  • Size

    5.3MB

  • MD5

    74e99858bbae987874f6bf3b8711eca7

  • SHA1

    8935d6d3fcbeec096fdc97f95caeefebaa147a6f

  • SHA256

    a4c27b7ee28ed6ac6fd1d32632b300090e4fcc87f90f9b893da272a5807eceab

  • SHA512

    8eecb1f345ac0d050dd242ce894377a71a83f0422b8199c7fb6e21aa2c2204e0a7a950b505ae909c9a10f68acca9a6d62d4fe33f69918c4ef02d7b49fb3df0b5

  • SSDEEP

    98304:gqI6jIG5ggVtWjdFeUdPi0h2M1CTr9CT6rVuFHHB8ibG9TDG6XXVu3HfuwXvommp:g0fxYfNdq0oM0tnVeHvbG9TDru3/e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.zip
    .zip
  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • Microsoft.VC80.MFCLOC.manifest
    .xml
  • http_dll.dll
    .dll windows:4 windows x86

    e741cd0919fe3a9d075f43a89ce7cb10


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • keepass-run.exe
    .exe windows:4 windows x86

    013b5b8276709c2ecd2887fac380e33f


    Code Sign

    Headers

    Imports

    Sections

  • mfc80u.dll
    .dll windows:4 windows x86

    4ca444b09cab86ae48fe835cb05c6e94


    Headers

    Imports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • townspeople.7z
    .png