General

  • Target

    10c856efbd5a399811434f59eeb3a02617e085b68fa41c29e653619aa73edd5d.zip

  • Size

    3.3MB

  • MD5

    92e0df65fd2a3625bae13026b0c7f2ba

  • SHA1

    eff69b8cdd236b6a4fff39ff7232aabccbdd08a2

  • SHA256

    10c856efbd5a399811434f59eeb3a02617e085b68fa41c29e653619aa73edd5d

  • SHA512

    afa287b6f7cc5a0d611b3684ea860c0e0fbd1b2d314735cac31412725e2de41e3c3f4cc1210df428df38cefe78a71aa1afc69805b76676854e8785513e8a539d

  • SSDEEP

    98304:Z89i7JDmWKwOA4qJtVqFLCrjL6BP+UIm3F2:Z8oDmWKqtcLCrSld3U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 10c856efbd5a399811434f59eeb3a02617e085b68fa41c29e653619aa73edd5d.zip
    .zip
  • ForceCPU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SampleRules.js
    .js
  • SimpleFilter.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SimpleFilter.pdb
  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Timeline.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Timeline.pdb
  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • audio/Countdown.wav
  • audio/LoadScriptError.wav
  • audio/SampleRules.js
    .js
  • client32.ini
  • client33.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • libEGL.dll
    .dll windows:6 windows x86 arch:x86

    9c98d3b5bee3ee0c5c0fdfcb4d295c31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    7fdfcbcdba6c59923de1b019ce9d3741


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    09a1c92c680828a2b8d5957df6555a70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libvlc.dll
    .dll windows:4 windows x86 arch:x86

    5c455bebc40d8ab001d42875154b8ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections