General

  • Target

    QBVNUE.zip

  • Size

    32.6MB

  • MD5

    ede5ff0de1cdf7b3d3c9b4475a2146e3

  • SHA1

    18886560e5f0c5352c1e664fc48737dd410b79d2

  • SHA256

    f97d78341b1209e8233d251097e0ca8db34609330aaca88392f000cceb267353

  • SHA512

    eafd4993bb1279655b755efe7f0abc18a067a45ea2a99e2ed945c541b92f7dfad796da59ff5e0aa7c71d33862b2f0d80ce73379b3b9724ee8788405c88b44efb

  • SSDEEP

    786432:xkf499HbQSXbj7Fh59U3AfSLnaFwIdMSnbe6asoVmQg35Aw:qfPSLj7b59ZgaF3vbhow1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QBVNUE.zip
    .zip

    Password: infected

  • 1
  • NjPUsv.exe
    .exe windows:5 windows x86 arch:x86

    7394c04002850bfe92232bd8331f8912


    Code Sign

    Headers

    Imports

    Sections

  • libcurl.dll
    .dll windows:6 windows x86 arch:x86

    e2ee5f7624fe4544ef49128b13d7e991


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections