Static

static

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    inicrypt.zip

  • Size

    17KB

  • MD5

    a8686d930e373664ce81a65707d34a91

  • SHA1

    c64321f76b614d38a40be4cf18efc40c6ac6b198

  • SHA256

    6375e43c3806a4fee4ce62090dd7501dd792d53c79aa01ad45ab541319f8fc01

  • SHA512

    aec062214fd8d96b431f25b4e2e308a678c56ea132c8eddf7f0fc1d86635c6dbc1ae22b6b50d2e21ebf2e5f9e86d5d922f21ea2284900dc2e138d4b266267a3b

  • SSDEEP

    384:TcCNV0vRFc1ZoR6uhsSmqC3tNkbKvxcj/6zWUJDfu4J23LgGX:vNOH0P35qWkbicjCFfn235

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • inicrypt.zip
    .zip
  • Gibbed.SpecOpsTheLine.IniDecrypt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Gibbed.SpecOpsTheLine.IniEncrypt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • NDesk.Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections