General

  • Target

    aa1651d4b9b7decf9e2422468f98d1f6

  • Size

    685KB

  • MD5

    aa1651d4b9b7decf9e2422468f98d1f6

  • SHA1

    fce1fa42fddd2bddcbfe9b29a37074a9f56619c9

  • SHA256

    41c1d26ddf43122bcfc337fb8415f2b36295c385bc78a3a6c0adfb2602aa85f2

  • SHA512

    b5e6113c218f77e8bc04f019ce7e596d5aa9b5443fac5141640fd8def6f4fdb6fad7c7fdfea867bc3edae5d371567eed9e25f1f9bcd4d59c14b5cc44046392aa

  • SSDEEP

    12288:LSevrU2VkWClKwOPugIQmQLjNC5ns6TtyrhL1TvJn/FFz5Ee4sfc8vy4hm3:LS6rPkWCVOVNC5nsLL1TvJ3ta86L3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • aa1651d4b9b7decf9e2422468f98d1f6
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/geyfegn.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedfigabeb.beba