General

  • Target

    1.rar

  • Size

    3.0MB

  • MD5

    a49254ddd520ec65a5fd3c1c6fc52308

  • SHA1

    b34d6ac5be2f29433433b794e7e95489eea6c2dc

  • SHA256

    55f94a469cec1e289b7903b18fbb9ef0507bb5ec86b58493af806fa6ba606717

  • SHA512

    4becc8911d3fa1691a925e63c880ef34b559752d5e625bd4062bc8b7ac8f2c302492d729268443aaea9e29395929c87d0aad1f62cdbefbf6af8555098d011fde

  • SSDEEP

    49152:h73GITlSkSpd40sqcHPo8HD61rVtN36N4uOm5pTg2ygYFMyjlWxVMmmT4Zu4+j5h:ZBpS7BcHPo+QKNEuJMx8xa8ILwY+kj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.rar
    .rar
  • DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    82da7ee900cc7c39439b01ac373ff6b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HipsDB.dll
    .dll windows:5 windows x86 arch:x86

    27a05d2d00281307fff2bbb42cea4d0e


    Code Sign

    Headers

    Imports

    Sections

  • Meiq.exe
    .exe windows:5 windows x86 arch:x86

    c0a2e17fe80aee2ace9659ff9544cf57


    Code Sign

    Headers

    Imports

    Sections

  • hrcomm.dll
    .dll windows:5 windows x86 arch:x86

    516bb8c28d494cb6cb1b12bbfeec4a13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jansson.dll
    .dll windows:5 windows x86 arch:x86

    6352b05f36a3dbcf39d907d987aec925


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:5 windows x86 arch:x86

    882acd5087a5ac829628463b4aeaf80e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libxsse.dll
    .dll windows:5 windows x86 arch:x86

    c1a77b6099db379d3f12d5329ceded1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • s.bin
  • selfprot.dll
    .dll windows:4 windows x86 arch:x86

    308b72fc76c681d9308f7640bb30bee9


    Headers

    Imports

    Exports

    Sections

  • sqlite.dll
    .dll windows:5 windows x86 arch:x86

    ed240468ea6db5274f2bb379c1fc6ca9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uactmon.dll
    .dll windows:5 windows x86 arch:x86

    86e7eec1e15c4d784791412b483ec56e


    Code Sign

    Headers

    Imports

    Sections

  • upgrade.dll
    .dll windows:5 windows x86 arch:x86

    728b7e78535c23780f9cf421e03852bb


    Code Sign

    Headers

    Imports

    Sections

  • usysdiag.dll
    .dll windows:5 windows x86 arch:x86

    e17404561494c850a5ac4b53ea852723


    Code Sign

    Headers

    Imports

    Exports

    Sections