General

  • Target

    e6a9f9ca7112a9e8960b5af9632fe8106ada7079f6442c16ce4ef609646c5e06

  • Size

    2.8MB

  • MD5

    dbc4594553c35ac64811a1f96f8f9333

  • SHA1

    5fcadf33828c388cef9b9d90dca8a5ece8174d6e

  • SHA256

    e6a9f9ca7112a9e8960b5af9632fe8106ada7079f6442c16ce4ef609646c5e06

  • SHA512

    a1787b162b42fb37b285e45a739f10f1bff9b79f0886d5f87354f633730959f4059c9cce37c958145731828de259c0421a37840ba0a96ba5c8c4e8b9a12a5be4

  • SSDEEP

    49152:3lAQumelDlEDThXBJOhH1w6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqR/gW:3l7/FXaEhRFY89YYc9jh23redpmQRC1G

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • e6a9f9ca7112a9e8960b5af9632fe8106ada7079f6442c16ce4ef609646c5e06
    .zip
  • ForceCPU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Screenshot.wav
  • SetupHelper
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • audio/Countdown.wav
  • audio/LoadScriptError.wav
  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    09a1c92c680828a2b8d5957df6555a70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections