General

  • Target

    Sample(s).rar

  • Size

    3.4MB

  • MD5

    8af7d34c5d159bba3ec1801426c21047

  • SHA1

    e454a1fa20b7903affb24fc00f39e62bbbac4045

  • SHA256

    9425bec10e6d1a6d607f3b340c11048da3495105d35d74c7b3dacaae5912907e

  • SHA512

    c4d12dd955e0afe78b785b9abc75fc890b90fee8d380a43878c3792946adf60c951c50ae32d6ae811a455f5097cfe3be86a12cb550c785312dbd2312912e26bf

  • SSDEEP

    98304:hMi81qhfbcJ4ZgeLYY81BAXk0W6huH99UTaMmp7g:h2qdcmZ/LUXAIiudgNUg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sample(s).rar
    .rar

    Password: infected

  • Enig.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    68aa04fa2467545634faa6a890de4eb7


    Code Sign

    Headers

    Imports

    Sections

  • cygz.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    23bd0118fe4faa8a43153ca1ecb587db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcharset.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    e5be14062fdd553e5fc4d060e52a73ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libebml.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    4c63ad962da801fb0f3134183db2ca4f


    Headers

    Imports

    Exports

    Sections

  • libiconv.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    fd9d50189b7721eddb2298ee8d46cb66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmatroska.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    4e256a7112dde447ba217d750ed6de0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc100.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    6ecbd31f78660e8af99e665d8a5ae336


    Code Sign

    Headers

    Imports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pcrecpp.dll
    .dll windows:4 windows x86 arch:x86

    15aeff6ab9e7eec3d853d83e880db4b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • s.bin