General

  • Target

    f797957066f7df06f719849951c278e9c5f56a225f6d68ee352a14539579d8af

  • Size

    630KB

  • MD5

    c6ba6c0f42898b7564e3d217a24efb3a

  • SHA1

    2cea91f4568bc298fe098e7caaac446ed706c05f

  • SHA256

    f797957066f7df06f719849951c278e9c5f56a225f6d68ee352a14539579d8af

  • SHA512

    006095e1ccbea8483bc85f9aa98751b56d153646cee21a348388dff0e21fa030f654e5dea82753ae1bfddc75859e7c6a63fd6c6cf7ceb992841a1ce83a35f849

  • SSDEEP

    12288:KvxwRbB0H5KUjUPKCuO+ggobwxJ3C4e5cI2kD7Bl:Kvx6bB0ZqAHgDSqcEn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f797957066f7df06f719849951c278e9c5f56a225f6d68ee352a14539579d8af
    .exe windows:5 windows x86 arch:x86

    f677acae05efabe7411a40902b2d88fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    595a3fd71239f605bb02d7a5e48fd4df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:6 windows x86 arch:x86

    0d6ae1f1ecbace583969d8eb8b21d1b8


    Headers

    Imports

    Exports

    Sections

  • Jammer.Opi
  • Politicking.Ine
  • computerspillets.txt
  • disusance.nar