General

  • Target

    b64aa412b48ac07a2824f7b0c7804cef

  • Size

    134KB

  • MD5

    b64aa412b48ac07a2824f7b0c7804cef

  • SHA1

    9676f2e969a0d5408211f020998c97314225697f

  • SHA256

    3df646b6808733e7256fcd52f43f64d63e2692c6be06c1ef37e1751f7f13843d

  • SHA512

    b4a1b15a9da61ec8aed21a1ab6c6b855ee3fa227ebe21dcd531570990e803f8bffa865e5255b31f6e6dc11f59131f6941d8f5bcd3157b1c1145621934c5840bd

  • SSDEEP

    3072:HnOn7t7XpdpCCTg/sxFgJceq8KAC6Jn3FV32//r:HKpdcCrTf8KpYnD0/r

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • b64aa412b48ac07a2824f7b0c7804cef
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    62dbaf939091253e23f58cbf28247157


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloadmr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections