General

  • Target

    cfshare.dll

  • Size

    928KB

  • MD5

    64c56f27c8cad278928c70089be1234a

  • SHA1

    9c013230f7c8d0fceae010d1ccd5cef6db83a78b

  • SHA256

    df86fd164be50973f6740d2f3d117803fad6f8bc619a0209acfb8a4a677544cb

  • SHA512

    2499422e0935e05b717138a880f052e9e41003e6655b3e2ceac7923df4ca412ec39deaff178972b190e3dd57b39f171330a8022e30539ac8504ce990b90e122b

  • SSDEEP

    24576:9mjREM+SOtAZuZ8NshX44YwN9AxORXEcu2zL/VqTo:whOtAZVshX44XAxORXk2X/Vd

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfshare.dll
    .dll windows:4 windows x86 arch:x86

    3214c1fb2ed6d4878f25a8d807f717b4


    Headers

    Imports

    Exports

    Sections