General

  • Target

    imsigma.zip

  • Size

    14.5MB

  • MD5

    5642976d8f6b7bcb1a4bbdd3dc408cfb

  • SHA1

    a83f8d86577724f7ab316d1f7d382fe83cc664aa

  • SHA256

    bdcb6dc50628c5e7c3e937cb6e2fd987e147a810a9244b39cafadf28da213a9c

  • SHA512

    8efa5df964480aa4a8fa3b440856201f99cbcc7f3200905ce3e23855da92397c6d13bed6528f289ad7357dd31154f6eb9324c28ec994b9e6ea738f8a899e73a4

  • SSDEEP

    393216:n/xJgdLxf67ojUq0PLf/D2ddwfWXWcAhdP4XtfjKL89bOnG56Mp:nTgjfPUq8baddwfoUYtLx1OnGjp

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • imsigma.zip
    .zip
  • Horizon.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • legacy.dll
    .dll windows:6 windows x64 arch:x64

    a5cd8b30579f0452c557c5a218391674


    Headers

    Imports

    Exports

    Sections

  • legacy.pdb
  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.pdb
  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    9eadbf5148e153214fcf42eacb707d29


    Headers

    Imports

    Exports

    Sections

  • libcurl.pdb
  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.pdb
  • mk-ca-bundle.pl
    .pl .sh linux
  • zlib.pdb
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections