General

  • Target

    files.cab

  • Size

    3.7MB

  • MD5

    b5a1995210150c6e9d362e967d83b590

  • SHA1

    f4642b8b5e125863cea56196b584cefa5861aebd

  • SHA256

    e0a36182df70d6af3289ea7c430874b8281db531c767beab5131f6726f5635a2

  • SHA512

    94ad3c4e539ef8cb50dfb81e4c1ca6ffeb3da18718c40a77b0c160354b7994896b54edc8ec94a552395d7fd529d95bc16e4e5baedd8c91a8fdb8777c85e00901

  • SSDEEP

    49152:4czdSZ4Yx87nxODZGMFLnd8q67DZQlXvAoxS1mvXpiIg7Wx:JBx7nxOtFjOq67DcO1mhz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • files.cab
    .cab
  • apdboot.dll
    .dll windows:6 windows x86 arch:x86

    83a26f604cf7b4f4c93e0c6c459eee68


    Headers

    Imports

    Exports

    Sections

  • apdproxy.exe
    .exe windows:4 windows x86 arch:x86

    5418bd4d1d2e6d9b56a845763bd44be0


    Code Sign

    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll