General

  • Target

    18521596289.zip

  • Size

    7.3MB

  • MD5

    e13058476f4d86114b715661b8b43507

  • SHA1

    8ae7fec2693751db9e1c941db35889dc1e5babfa

  • SHA256

    7369aa3c534836ccb6f19d2beaafc0cb093518e5b6e853ee7d066ceb0324e202

  • SHA512

    b5be972a96813dd487ff9088d9df81da69dc3ebdcbe6e10deee78f0048f14ac47b71d9d18fa12480f3b171e4e0a7ad64f7679d8769534a1b3399b1b68f90017d

  • SSDEEP

    196608:sY5NAkE6hxblTwrDRe/u8zl45MqBjG5S0GW+0vuSWIkB9C:LdEixtw/Re/7azY5S0R+0vuSYG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18521596289.zip
    .zip

    Password: infected

  • c63f952656a3d696889798ccaf55de44273a0340d920497cb4cf42c9edbc70b8
    .zip
  • Register.dll
    .dll windows:5 windows x86 arch:x86

    ee94d9d14cff80538936ff9d276ecfc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • babyface.eps
  • der.zip
  • hydrogeology.wmv
  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/App.xbf
  • x64/AzureKeyVaultDgssLib.dll
    .dll windows:6 windows x64 arch:x64

    6d8ad25c4a1c6db874e4c7a09586c835


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/BugReporter
    .exe windows:6 windows x64 arch:x64

    dbc516dc79588b57876c4687775eae55


    Code Sign

    Headers

    Imports

    Sections

  • x64/ComExtractor
    .exe windows:6 windows x64 arch:x64

    6527bcdc513959a2e1b9c1144e3ee285


    Code Sign

    Headers

    Imports

    Sections

  • x64/HDHelper_[0MB]_[1].exe
    .exe windows:5 windows x86 arch:x86

    82a2d44124f64fef31cc8e1daa6c7ece


    Code Sign

    Headers

    Imports

    Sections

  • x64/Microsoft.Toolkit.Win32.UI.XamlHost.dll
    .dll windows:6 windows x64 arch:x64

    4372b5e8b06c35af2c3b158d27f120f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/NvStereoUtilityOGL_[1MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    3eeeacdc454cd4576630513f651ad97f


    Code Sign

    Headers

    Imports

    Sections

  • x64/RepackagerStartPage.xbf
  • x64/VSLauncher_[0MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    61cdf76393ba81a66e782c6a30558888


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/WinUiBootstrapper.dll
    .dll windows:6 windows x64 arch:x64

    f36a9647672407a81f21ebd26c499fba


    Headers

    Imports

    Exports

    Sections

  • x64/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-console-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-fibers-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    3d64c0b7659a72157d6f0180ea1141c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/encoder.dll
    .dll windows:6 windows x64 arch:x64

    af70db1387fe1f988db774c6a441fb5f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/expatai.dll
    .dll windows:6 windows x64 arch:x64

    b20a84f01b159995e771c0da4a95015d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msvcp140_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/registryTracer64.dll
    .dll windows:6 windows x64 arch:x64

    f55d6bc6be4d4e93bf0261e8c7ab1e7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    577c6274aefd71bb684cdfc802281da3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/vcruntime140_1_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/vcruntime140_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/zlibai.dll
    .dll windows:6 windows x64 arch:x64

    63e190d226d2dc9d1d395245dcb04395


    Code Sign

    Headers

    Imports

    Exports

    Sections