General

  • Target

    aa96486301c299a062df24f646c8df37

  • Size

    637KB

  • MD5

    aa96486301c299a062df24f646c8df37

  • SHA1

    1b1c9441d50c7a074e485dd9f7914393c9536329

  • SHA256

    214eda63f36e1e72f024ab04ffa5c8f4ed8a22eb68c51a7afa7ea0ac5dcb0cf4

  • SHA512

    c71402d8b5fdf51f60db79f5f6e0d3a143aae52d170dc23e6e8e706607000d968cfd8af533cdc3ef87b00d58ba0c5ec2e7363e2fbdf550ab2a7a688235c83178

  • SSDEEP

    12288:YWYS8K/8hIeI8Pzqn8/9dYd2svmt1FknuFiQOFYLcc6UplYfc8vy4hLw:YWL808+AG6t1F2HYLzd86aw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • aa96486301c299a062df24f646c8df37
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dfstmip.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgbfbheb.behbfbg