General

  • Target

    a35ea7a74a898390a33caf522ee13c0d

  • Size

    637KB

  • MD5

    a35ea7a74a898390a33caf522ee13c0d

  • SHA1

    50fb4b37aea4686937f99ae0f518728f6b3e87a4

  • SHA256

    220f1d119b75c8238b2461ef67ff7f4849dd6d0295ed431e686f54993fde5f47

  • SHA512

    2f7a24fa83bd0cbb88ab3fe4cd648ce8c556a949bda3004a45995f7be9c1b44e4811681b04d7aba276c36c0e896bdd6dff6b4642d116f8ecc076887b0e7f77bf

  • SSDEEP

    12288:ByYS8K/8hIeI8Pzqn8/9dYd2svmt1FknuFiQOFYLcc6UplYfc8vy4h2n:ByL808+AG6t1F2HYLzd86Ln

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • a35ea7a74a898390a33caf522ee13c0d
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dfstmip.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgbfbheb.behbfbg