Resubmissions

General

  • Target

    Norhof Install.zip

  • Size

    20.5MB

  • MD5

    1c15d58acc0dd118a4913ec73f599b40

  • SHA1

    56a24488884a1bf03918d6d368e8f1ae2e3f40d8

  • SHA256

    809e7a18a3efb1ca40a8ca498cbac463a71d101546bf5a1869a4458845e0690d

  • SHA512

    ff1aa20cb2d9340232727a109a5df079b0788c8de9eda8aef974e2745cace422cfa24f79f0f74cd288a383f1f0225cbb9bae871a9e253b9009076161b878aa64

  • SSDEEP

    393216:htNRe3sBJrsIIDT7sXyF3V5dB8068H+sOjkUtCwsfwOW7zxHV:htze37II4XS37dWT8esOjwTwrPtV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • Norhof Install.zip
    .zip
  • NorhofInstall.exe
    .exe windows:4 windows x86 arch:x86

    b25c90c58aba197bd110f6da841fd5c9


    Headers

    Imports

    Sections

  • PumpMonitor.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    fe3e00b55ce38538da3f709132445d8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMM32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    981c4b05d92d1681a5f459ad4e52b1b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NorhofPump8_63.pak
  • NorhofSetup1.EXE
    .exe windows:4 windows x86 arch:x86

    9d031f97ea77b7f10014879c2c1ed1aa


    Headers

    Imports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • PM_systemspecs.sys
  • Pump913drv.exe
    .exe windows:4 windows x86 arch:x86

    b50ff3d242b982ff5dc47b5bf89096e0


    Headers

    Imports

    Sections

  • PumpMonitor.exe
    .exe windows:4 windows x86 arch:x86

    aed419c125be185b726358352c23f02c


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • avrdude.conf
  • avrdude.exe
    .exe windows:4 windows x86 arch:x86

    d81e51c1249e61a5c9b7dc0a291d877e


    Headers

    Imports

    Sections

  • driver-atmel-bundle-7.0.888.exe
    .exe windows:5 windows x86 arch:x86

    963226e6bbe29f87aa49b92b4ae9a4f1


    Code Sign

    Headers

    Imports

    Sections

  • libhidapi-0.dll
    .dll windows:4 windows x86 arch:x86

    2fbf08eef599755c1b52808cdbec1575


    Headers

    Imports

    Exports

    Sections

  • libusb-win32-devel-filter-1.2.6.0.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • libusb0.dll
    .dll windows:6 windows x86 arch:x86

    16cfa198e44dfce3c5ad03895857845f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce5958d8adf86078d58c0c6f95621ee9


    Headers

    Imports

    Exports

    Sections

  • SETUP.LST
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    4159a9ccafdc9e418bec02d791aa5942


    Headers

    Imports

    Sections