General

  • Target

    Documents.zip

  • Size

    2.1MB

  • MD5

    06621638fa9e9e0bab2d7716fe73ce1f

  • SHA1

    7848a11d6eead901a3fe8b2a0927b15fdeebd773

  • SHA256

    d4025479d903bf24edf0cda8f9152f434dc7221802623091e92de903a2aedc95

  • SHA512

    d5123ea00bae41e0231a759b8812b78136aa01f5d9b923496244495b49e28657cb8d0c6e49997190c2497cde9857b0eff54606aea9723cf28ca85453aa826a17

  • SSDEEP

    49152:wjW0xxgYrp7TVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK023K8mWLawS6T:wqGeSzENOzeuAGrXnF6uolAF4oT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Documents.zip
    .zip
  • Documents/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/NSM.LIC
  • Documents/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    ef1f3ab1ce0aecabb43db96a36b33ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/client32.ini
  • Documents/file.exe
    .exe windows:4 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Headers

    Imports

    Sections

  • Documents/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/nskbfltr.inf
  • Documents/nsm_vpro.ini
  • Documents/pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections