General

  • Target

    setup.zip

  • Size

    3.4MB

  • MD5

    0aede067611d8a9b024372b9b2f51420

  • SHA1

    80d95eacbd35eb6a5c84286657c5711443f46174

  • SHA256

    ba526f954438f2b9528a376dd8fa6aa435a1c1144da1d702c2fd9121d7806cff

  • SHA512

    93d24e18c0d2f49229191d6164810d7832f3f98259eb89d673ae82caababadfa364289b9ffff604b260c9c9b63bd05c1e416364ed6f3a6700f3acaa2c02143ac

  • SSDEEP

    49152:Xt+minsIfE9o1so+QWNLEBoYDxMk9UX9zdCbhD9Er69sPlHBNJv0uB/oYR:d+mkn1sr5LE28akacomKNJ8W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • setup.zip
    .zip
  • AuthFWWizFwk.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ReadMe(!).txt
  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    625b3ad2d833390d2a48864c0dc837df


    Code Sign

    Headers

    Imports

    Sections

  • WinEULA.txt
  • bombard.aspx
  • madbasic_.bpl
    .dll windows:5 windows x86 arch:x86

    ae5a6a29d3cea5a63ad958cfb1a5fb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • symbololatry.psd
  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections