General

  • Target

    input.zip

  • Size

    234KB

  • MD5

    4edebd17f87ca82bf73592e4d092f4b0

  • SHA1

    9acbad9c316e0f7257516fe1f7af36a774358ead

  • SHA256

    907a589834514c29adf984323b2de72dba666c4a5586b92fbd167dd01421351d

  • SHA512

    1fde0f5b72641fc95b78c36e26e764b8da86db59bf5e8e66995440c2ab2dfadca3eecf386802fb1bcd157340676d1bdc8a66b1bbd02a96a0e624ed15ce735ab7

  • SSDEEP

    6144:K2QtSx8li+SUmhKOGZEVZcCKqH4bxvcQa/y:ZQtu82plXfNfyEQa/y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • input.zip
    .zip
  • Create TRS_500.bat
  • DPC.exe
    .exe windows:4 windows x86 arch:x86

    6109c06809e7a16475b9b07ee9115652


    Code Sign

    Headers

    Imports

    Sections

  • MeasureSleep.exe
    .exe windows:6 windows x64 arch:x64

    11f2665eaaaf2de7cb4e3312fbfeab4a


    Headers

    Imports

    Sections

  • RBtray/RBHook.dll
    .dll windows:5 windows x64 arch:x64

    ae63ac30ebcf14f3d3d97c066b3cfb44


    Headers

    Imports

    Exports

    Sections

  • RBtray/RBTray.exe
    .exe windows:5 windows x64 arch:x64

    4d9eb64025740014bb3d66947f81bc56


    Headers

    Imports

    Sections

  • SetTimerResolutionService.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • hpet.txt
  • pytb.txt
  • startup.txt