General

  • Target

    79f88ff18dac0aa6bf3feb30fc826cae

  • Size

    695KB

  • MD5

    79f88ff18dac0aa6bf3feb30fc826cae

  • SHA1

    9017dd16e16c5cb50377c0ef5cbe22f58c285a83

  • SHA256

    1303dfc4965ce2631f4ecf1798ae839d615e4a60b75f917877707d2338037764

  • SHA512

    14bde0f88fe9df505734619e591813897e78a005ad1b3401e59be89f007a26a8e1d118f9e8ddb1c7ad6270c23f0b651653bdf9357b0936fafd2b1a4cd7960c74

  • SSDEEP

    12288:xnFHW41juFKNEQuD8NCO6wNmBxanUx0/4GuyOpjDZ3fc8vy4hF:xntWmjLN9u6CfwNmBxn0/9ORDZU86o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 79f88ff18dac0aa6bf3feb30fc826cae
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/wnjwano.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgddfdca.acdfdd