General

  • Target

    25e3861a4809da6c7b0ae1fba974b8f9c9a23fa4d38223535d5dd8897035046e

  • Size

    2.8MB

  • MD5

    7e350be7aa0eb0ad14222af359c3d9c0

  • SHA1

    6e46af40ec63289b8cc239c50c826d4e8531b5e5

  • SHA256

    25e3861a4809da6c7b0ae1fba974b8f9c9a23fa4d38223535d5dd8897035046e

  • SHA512

    cca87c6bdaaff0d835ed8094fd0e9353b86d279551e36629a155c06982b172e696d204cbec43d215d3157610a36960a39411eab50d73feac7880cb3f1e710ba3

  • SSDEEP

    49152:Xpm4aYy6Hv03XBIfRn8+0KqxFnRLrxs+FLiMhxgxHm6:UVk0HSthA5s+9iMhxgxb

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 25e3861a4809da6c7b0ae1fba974b8f9c9a23fa4d38223535d5dd8897035046e
    .zip
  • Eapagent.dll
    .dll windows:4 windows x86 arch:x86

    8a25b007b52d3cf7829fb642356cc1e4


    Headers

    Imports

    Exports

    Sections

  • HWSignature.dll
    .dll windows:5 windows x86 arch:x86

    02a9058c889f86b891a63b683ab98a79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IM_MOD_RL_flif_.dll
    .dll windows:5 windows x86 arch:x86

    27905d5c3eeb7d7c9ccae3bb90231a8d


    Headers

    Imports

    Exports

    Sections

  • IM_MOD_RL_pes_.dll
    .dll windows:5 windows x86 arch:x86

    33a5202cb1bbf4ce6f8a273b92824c87


    Headers

    Imports

    Exports

    Sections

  • InstallUtils.dll
    .dll windows:5 windows x86 arch:x86

    e9c9c2dd636c55d6988d7c91e884ce99


    Headers

    Imports

    Exports

    Sections

  • Lttmbu.dll
    .dll windows:6 windows x86 arch:x86

    53c2bbef15192efcddf540fb89fa4988


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NTBootFix.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    e890f05b11b0d64c6d0808f887c36b44


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    c242a3917b213a5fd5843783c323b788


    Headers

    Imports

    Sections

  • jisupdftoword.exe
    .exe windows:5 windows x86 arch:x86

    43e80d41a9062d8b199ada9fd024b847


    Code Sign

    Headers

    Imports

    Sections

  • kmco628r.dll
    .dll windows:4 windows x86 arch:x86

    2844ff1ddb4921dc508dd6ffb2673fd4


    Headers

    Imports

    Exports

    Sections

  • ksafevul.dll
    .dll windows:5 windows x86 arch:x86

    8d1f066b84d6a4801bb2e8e222f14acd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qlsdm.dll
    .dll windows:4 windows x86 arch:x86

    3e5da7ffd68d562f1c207526b4c253f4


    Headers

    Imports

    Exports

    Sections

  • qmldbg_local.dll
    .dll windows:6 windows x86 arch:x86

    97cb0040347b0275f925d226b75e42c5


    Headers

    Imports

    Exports

    Sections

  • twaincom2.dll
    .dll windows:4 windows x86 arch:x86

    2fd63306378cd750934b418fbeeec900


    Headers

    Imports

    Exports

    Sections