General

  • Target

    MDE_File_Sample_781e67c172f8601e4916e962b4e09d0e1b78cc11.zip

  • Size

    73KB

  • MD5

    b0190d1deffb7361d357465406fc9f51

  • SHA1

    c29ebb94065cf296a82bcd0cc78c03ec953884b4

  • SHA256

    b7ea0d82704fef4a21e51cac362c1fecb3383e18b2907a6628a204225b54e896

  • SHA512

    0af87be22592091b45d6a23b525b12c20b3d59170cc3eaab3f0a8de1a350e9c7f182e920135632dd0080dad04e0ed8d24fba681176d06aced5c367bbce6105f8

  • SSDEEP

    1536:L4P7hLeObX+EzrfbLlkHLdpDeN7RoVyIqgBLX9dJn1gmsXYAJYJsjQJ:L47zXRrvlkRtGmgIqQRD1gm0JYJsjQJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • MDE_File_Sample_781e67c172f8601e4916e962b4e09d0e1b78cc11.zip
    .zip

    Password: infected

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/image.gif
    .gif
  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    a6901edc54b2da8c27f3fbfe82670720


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections