General

  • Target

    d891a580f3a7059c52707500c6bc8a27d54fc3174591681829243510c2b9c7a5

  • Size

    2.9MB

  • MD5

    b31298f8cb523ed7ab8e76df7a6c9349

  • SHA1

    4698ef0c606b6fef91c9630d416e5c888a767374

  • SHA256

    d891a580f3a7059c52707500c6bc8a27d54fc3174591681829243510c2b9c7a5

  • SHA512

    b82788a7438c14ebb9199f323e1e961767f4731bd65c9370bffe52325d08e008f60e93fad89cd965728f5abee006e0a3e00d54b422c11451dd32af51b63e89b1

  • SSDEEP

    49152:3lAQumelDlEDThXBJOhH1w6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gw:3l7/FXaEhRFY89YYc9jh23redpmQRC1g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d891a580f3a7059c52707500c6bc8a27d54fc3174591681829243510c2b9c7a5
    .zip
  • ForceCPU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • GA.Analytics.Monitor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Screenshot.wav
  • SetupHelper
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • audio/Countdown.wav
  • audio/LoadScriptError.wav
  • audio/TrustCert.pdb
  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    09a1c92c680828a2b8d5957df6555a70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections