General

  • Target

    68bd63fef52df4db72ea8f6bb355f2c9d5a37ac34ef0efc35ecbf159f282f16b.exe

  • Size

    15.4MB

  • MD5

    fa2a0e9a5fa61f233c5ee8a5d17ef74e

  • SHA1

    b48151402a0f71ed5895b2915c38a665af3f8ae9

  • SHA256

    68bd63fef52df4db72ea8f6bb355f2c9d5a37ac34ef0efc35ecbf159f282f16b

  • SHA512

    ec196942e154f97ba2be88e3905c48542cc98ccbad8595221fdc3dcd757d413c549bd0eb42aca906aa15dfc6dacb71cc2d432c19fb3b0b003d61716e16c27bb7

  • SSDEEP

    393216:hlEvIf5YEYeD/92eSIAWtekxzYbFKbm4+:hlpRYHeOIAWt9YKbD+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 68bd63fef52df4db72ea8f6bb355f2c9d5a37ac34ef0efc35ecbf159f282f16b.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:4 windows x86 arch:x86

    fb89301642ac2a39aefdd3cc2610ed81


    Headers

    Imports

    Exports

    Sections

  • CoolProcessHelper.exe
    .exe windows:4 windows x86 arch:x86

    5d5a64e2ccf3245a25206fb9c95f75e7


    Code Sign

    Headers

    Imports

    Sections