General

  • Target

    970bf1bf2404eabcf5b690704be3d17c

  • Size

    706KB

  • MD5

    970bf1bf2404eabcf5b690704be3d17c

  • SHA1

    5c8c067d4d14d28319cd6bab3ba3034bf2fe0d78

  • SHA256

    135f5e5f77bb6e8cd18502605dd7127f51df8f0528a81248fbad1cee10526d95

  • SHA512

    ac9a2701824998d0c60a331e5f671f3fc79f7dfb561ee3eceb8521473be338ca2d714060cabe6d93fe20af78f037dc5ad721783c366cfd8b9a86eeac9baa4470

  • SSDEEP

    12288:RsTkCamG7imn7XQiYU0/++2NzKFkhvJqCFNalYXjvQwDpw58VzRaPfc8vy4hI:RsThbG3UGfYFkhvJbN7joCw58VzRP86h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 970bf1bf2404eabcf5b690704be3d17c
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/enycizl.dll
    .dll windows:5 windows x86 arch:x86

    8e9b5b6e436a7821e9e4cf0ea51b2d92


    Headers

    Imports

    Exports

    Sections

  • bedhicfhdh.hdhfcihd