General

  • Target

    MedicareSign.zip

  • Size

    10.1MB

  • MD5

    d5f1c6df24f165f9012d1068a693c1be

  • SHA1

    8abd23316ab18861f4817704a5ad9aef3dc87f9d

  • SHA256

    bb227aa7b0404ccac254372c91ddf2e307526aa82ed9c4ecd3e495c38a6b4552

  • SHA512

    82590236958a1d7c6681eeaa2bbb7f8bc3489e6b73bffe472a7dc13aec45d87ee1b992e3154e8d55d1942ffadc5165d6530407b55d76e2331c32a4762b515fdf

  • SSDEEP

    196608:ZeDsDsiGV9/Mk6FpejSJ7ZYM3TTKuln392pzzsnlTob+ykuli:ZeQDS/EcSJb/Kuln3kpknJo7/i

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • MedicareSign.zip
    .zip
  • MedicareSign/AstCrp.dll
    .dll windows:6 windows x86 arch:x86

    ecfb07d1cffa42cf9f03de8b2e866d5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/MedicareStart.exe
    .exe windows:4 windows x86 arch:x86

    753885281436b217e268b804bdc6a7c3


    Code Sign

    Headers

    Imports

    Sections

  • MedicareSign/SHFolder.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MedicareSign/astclient.dll
    .dll windows:6 windows x86 arch:x86

    a3fbd94243afa2a15b8e8c731a841cec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/astprint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/astrct.dll
    .dll windows:6 windows x86 arch:x86

    b838be4c6234cdba137bfc607df6d947


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/aw_sas32.dll
    .dll windows:5 windows x86 arch:x86

    9917f67fb1a99599732bcb490d6124a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/config.ini
  • MedicareSign/eng.lng
  • MedicareSign/hatls.dll
    .dll windows:5 windows x86 arch:x86

    48a45bf322f87dd0a0cc13b742cf7e6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/libcrypto1_1.dll
    .dll windows:6 windows x86 arch:x86

    c7eb5fa3e7df3e7704a47d413477f52b


    Headers

    Imports

    Exports

    Sections

  • MedicareSign/libcryptoMD.dll
    .dll windows:6 windows x86 arch:x86

    8c0767be991db4f5e9bd67fff379c857


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/libcurl.dll
    .dll windows:6 windows x86 arch:x86

    b4a2bcc190f7b0fbca6511bd86e93efa


    Headers

    Imports

    Exports

    Sections

  • MedicareSign/libjpegturbowin.dll
    .dll windows:6 windows x86 arch:x86

    436dca7c10a2aa0d9b3aadf882355683


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/libssl1_1.dll
    .dll windows:6 windows x86 arch:x86

    fc2cd4ad4bac6a6de06f484014233a65


    Headers

    Imports

    Exports

    Sections

  • MedicareSign/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/opus.dll
    .dll windows:6 windows x86 arch:x86

    dd48c4946bfdd962f6cc2896652b0210


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/rus.lng
  • MedicareSign/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    923aa130c21002b50b462e446b3be0d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/vcomp140.dll
    .dll windows:6 windows x86 arch:x86

    8f713adc16efa9ec02a5f6f5397a2922


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b1497ec17e3cfac16846155a7a629324


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MedicareSign/vcruntime140d.dll
    .dll windows:6 windows x86 arch:x86

    3f5bb09e0b89ea194dabd8ec2b778bf9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • __MACOSX/._MedicareSign
  • __MACOSX/MedicareSign/._AstCrp.dll
  • __MACOSX/MedicareSign/._MedicareStart.exe
  • __MACOSX/MedicareSign/._SHFolder.dll
  • __MACOSX/MedicareSign/._astclient.dll
  • __MACOSX/MedicareSign/._astprint.dll
  • __MACOSX/MedicareSign/._astrct.dll
  • __MACOSX/MedicareSign/._aw_sas32.dll
  • __MACOSX/MedicareSign/._config.ini
  • __MACOSX/MedicareSign/._eng.lng
  • __MACOSX/MedicareSign/._hatls.dll
  • __MACOSX/MedicareSign/._libcrypto1_1.dll
  • __MACOSX/MedicareSign/._libcryptoMD.dll
  • __MACOSX/MedicareSign/._libcurl.dll
  • __MACOSX/MedicareSign/._libjpegturbowin.dll
  • __MACOSX/MedicareSign/._libssl1_1.dll
  • __MACOSX/MedicareSign/._msvcr120.dll
  • __MACOSX/MedicareSign/._opus.dll
  • __MACOSX/MedicareSign/._rus.lng
  • __MACOSX/MedicareSign/._sqlite3.dll
  • __MACOSX/MedicareSign/._vcomp140.dll
  • __MACOSX/MedicareSign/._vcruntime140.dll
  • __MACOSX/MedicareSign/._vcruntime140d.dll