General

  • Target

    1644ba09d5611298e997ef161c3d9c68b3b01271c37da89333e09c18cd071a0a.img

  • Size

    1.2MB

  • MD5

    41281de2261db2b236e0c61c18add431

  • SHA1

    a3991bb82680c06802a3812f7a6331dc445a5eaa

  • SHA256

    1644ba09d5611298e997ef161c3d9c68b3b01271c37da89333e09c18cd071a0a

  • SHA512

    5d63587ed47f4c1e1c70630d459a8ff87b91b8bd6b1fe1b32e6b2719da2bf109a235a6cba7641a66525d54179e71ad5faebcf418c7b3882dbb805ff529ba3129

  • SSDEEP

    12288:/8oTmXIyx0DtKbV9Xaftvk6IAEy9UhK+8TAQ5+rROX:koTW0RPC6kyK104I

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 1644ba09d5611298e997ef161c3d9c68b3b01271c37da89333e09c18cd071a0a.img
    .iso
  • out.iso
    .iso
  • Order 0002939399440.bat
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • Gunvors.Kle
  • Ligydidae.mam
  • Mahdiship/laantagningen.sav
  • Marxs.ano
  • Smoos/exothecium.txt