General

  • Target

    67284ea965c67f85faf974654447f437

  • Size

    686KB

  • MD5

    67284ea965c67f85faf974654447f437

  • SHA1

    aad6251515341d9eabde9c4e14524a09e61a283a

  • SHA256

    2461a6b0d74e02ef5829ac5f6ee3507202d58d7b7912af7f579ccf6ef208743e

  • SHA512

    f9ba3daac93f512147d7d8a4fcc15e63db6b6ab21b36dcc36d9e4cf864bacedfa6d3747312aea94a0f918613e263a33c676e2b30d9f86020e9adfda15ee72ebf

  • SSDEEP

    12288:sG5vMckw/05wDwZzlgpn1F9JkdKI7LXFdPTLy17jrfTfc8vy4hB:sDcP05bHanJkQuFBH4XfA862

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 67284ea965c67f85faf974654447f437
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/gnskvsl.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfjhijca.acjihjf