General

  • Target

    User.zip

  • Size

    2.1MB

  • MD5

    7edb35c407917c9528d8a488cdc26477

  • SHA1

    50c6058ed2c35c488e05753f347c5c3dd584ea18

  • SHA256

    0394ea89123da4336cd37ee040311c5658bbcfc85e2943bd21a448e5dcfe8dd3

  • SHA512

    f4061a10e65f45063b8c0491506fcf6762e392f6e00425e29891085c99dd93350a49a3f8bc3cde698b7b65cdd31a6610ac08a762f44992d6a186170c7b90f467

  • SSDEEP

    49152:UjW0xxWYrp7nVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02rO8mWLawS6b:UqGsSPENOzeuAGrXnF6uolKh4ob

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • User.zip
    .zip
  • User/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/NSM.LIC
  • User/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    ef1f3ab1ce0aecabb43db96a36b33ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/client32.exe
    .exe windows:4 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Headers

    Imports

    Sections

  • User/client32.ini
  • User/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/nskbfltr.inf
  • User/nsm_vpro.ini
  • User/pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • User/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections