General

  • Target

    00682f38590518386125cafff9c9b07f8d10e64ecd7db867e6c1409e4a886b96.zip

  • Size

    2.1MB

  • MD5

    e1913521d1e1db9b5a55502eb6106443

  • SHA1

    18b4ee5c220c64a1143c1d3927f244e0b7ebfad7

  • SHA256

    00682f38590518386125cafff9c9b07f8d10e64ecd7db867e6c1409e4a886b96

  • SHA512

    137a39aba5d20d007ce093c7de648b952e4dc5952775d7edd9cc1d8e6a2411a63ecef78f1f468b96520fa42d237716ace89a03e08f4cfb84c9c96f4c49c92d22

  • SSDEEP

    24576:Nli6BRnmSnSpUDCNIsyYPPluW/2/BqIQZfW4OCayzzB6q8G9Y3MQQXSK87X6w08z:/z3SpHNIsvPIW/2gIKfqifFa8Z8dRM6r

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00682f38590518386125cafff9c9b07f8d10e64ecd7db867e6c1409e4a886b96.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    ef1f3ab1ce0aecabb43db96a36b33ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.ini
  • file.exe
    .exe windows:4 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Headers

    Imports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections