General

  • Target

    b8be133630a1407b8af0e985bf61304c

  • Size

    713KB

  • MD5

    b8be133630a1407b8af0e985bf61304c

  • SHA1

    04ce0922f62aceca52998a68da45a64cc95303fd

  • SHA256

    15c1731de169b5f0d30045d46f201df00ef196547853c84d5411c15631456e85

  • SHA512

    48f25409480e811c970e935fef3710fc04e56ed21f4574f4e6f303ef20f163fd384767f67fc7c5b00153a841cb357567907258f5275c0e554e679c07b76c315f

  • SSDEEP

    12288:6x3yIymd6lO+xBc2f6OnqoQfBoFsTmHUoYvo2rg6VwgY4t706/dFFbe04KKjzDc2:60IdQO+BFf6Oq8FsTm0oYvoYg6XYYQ6+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b8be133630a1407b8af0e985bf61304c
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/drdmlox.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedgfcjheb.behjcfg