General

  • Target

    Uniscaler Preview 10.zip

  • Size

    85.8MB

  • MD5

    0670c0f7025d8dfb26c688a51dbe4a5d

  • SHA1

    599fa7c3c4baaffb8f12a35a0a4cb8a63d70fa6d

  • SHA256

    d6ce2b89398c3e28539c334636a34ede3bec9894b9cd41ac6db55034ce0aef44

  • SHA512

    c52d90da7d454070cd6bbb5b2398b5b25e6a5a08f24b29454b161eaf4d88c678b1eba34b6bcf292a84e6b3c4a21dc7a3171c508b50d4bc7688cff1805e04b237

  • SSDEEP

    1572864:7Il0/fpelUMmkGUfb6lHbfC3BsTGfpH4+rl0cASs67n3CokrLLIz+:7V/fhNBkBsTGRH4+p0i3CL/Lm+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Uniscaler Preview 10.zip
    .zip

    Password: infected

  • Uniscaler.asi
    .dll windows:6 windows x64 arch:x64

    Password: infected

    8594c3fdb84f99375252d539c62b2cb3


    Headers

    Imports

    Exports

    Sections

  • stub_nvngx/DisableSignatureOverride.reg
  • stub_nvngx/EnableSignatureOverride.reg
  • stub_nvngx/nvngx.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    fd717b0da086d0ba057eabce8c7dc26d


    Headers

    Imports

    Exports

    Sections

  • uniscaler/amd_fidelityfx_dx12.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    dc0e6aad86f0ac22f2cab6625b12fc0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uniscaler/nvngx.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    fd717b0da086d0ba057eabce8c7dc26d


    Headers

    Imports

    Exports

    Sections

  • uniscaler/nvngx_dlss.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    154e283e694e5fc75c2bd54e533abe38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uniscaler/us.libxess.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    1789c74c8b3404a69d511789573fc7b9


    Headers

    Imports

    Exports

    Sections

  • winmm.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    d5e2a3e7507a78a5dddf2041d150c06f


    Headers

    Imports

    Exports

    Sections

  • winmm.ini