General

  • Target

    lada.zip

  • Size

    2.1MB

  • MD5

    3d53ee9d7dfb6e64871826d789424c49

  • SHA1

    09fecbb2b606f01c0e921dfed341f9f44506d8c5

  • SHA256

    177b044664d7a6b98423049d8fead8dc3847fc15505a8b2c983096a27876ecc2

  • SHA512

    c5e5e14fc55589f20faf5aef4eeadc38979cfe1c058bfeaf59f1bd4ceb2d57b3ab08ac7efc6fc6d9f9db412c1bd21e46673740619d8f30b4347d2df810245d58

  • SSDEEP

    49152:qjW0xxBYrp7PVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02Yh8mWLawS6/:qqGHS/ENOzeuAGrXnF6uolFq4o/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lada.zip
    .zip
  • lada/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/NSM.LIC
  • lada/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    ef1f3ab1ce0aecabb43db96a36b33ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/client32.ini
  • lada/host.exe
    .exe windows:4 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Headers

    Imports

    Sections

  • lada/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/nskbfltr.inf
  • lada/nsm_vpro.ini
  • lada/pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lada/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections