General

  • Target

    c529c0a7990ed68d0c554095caf798fb

  • Size

    708KB

  • MD5

    c529c0a7990ed68d0c554095caf798fb

  • SHA1

    87835e95ac75bcedb24cb8262513ea976567f40c

  • SHA256

    130dff80cf9bc9a5acab926c0bd69941cc381f5c6999117e4f3730409d5d13b3

  • SHA512

    2d6de544b66700d5f013a4dd1f5c981da9708bd44851918eddd89b18d9cd44c840f05e68200b9fb9ce85876c287ea7afa6141968cc92f87a7ba815e4a25f106d

  • SSDEEP

    12288:aCf1W7zQImcgeZdisgm5T40xHeNNVEhhvl7/xjwzhdwfc8vy4hf:aWKF4eZ4s9O8eNXALxjwz586a

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c529c0a7990ed68d0c554095caf798fb
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/hovoyln.dll
    .dll windows:6 windows x86 arch:x86

    94972ed9e2d37f60c26f3ae754dd86dc


    Headers

    Imports

    Exports

    Sections

  • bedhbacbca.acbcab