General

  • Target

    4.1_Setup.1.zip

  • Size

    30.8MB

  • MD5

    909aa2f53f42c56812f0f2d7613fb088

  • SHA1

    cf922fa095c2a5cf512d75b2c8a20fe6ccfe6708

  • SHA256

    16047f8c97aaef404c3e45d42fef13e577c06c2c89412296cef245f572f95e02

  • SHA512

    d7e28d4ac7be8abe2d04e224b1271e002583be8ff1233678a83eaf89437485a1520c213612289c227ef3bc2a1931cfff76c78b81d166f060c34a6a5302d8051a

  • SSDEEP

    786432:IYfOTm9ppBRHluYfOTm9ppBRHlgYfOTm9ppBRHlm:nGTqPlGTqPPGTqPm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4.1_Setup.1.zip
    .zip
  • PASS1234.txt
  • libb/d3d7.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    44c62d4f3d02c36a90dc024c96f3efa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libb/d3d8.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    44c62d4f3d02c36a90dc024c96f3efa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libb/d4d1.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    44c62d4f3d02c36a90dc024c96f3efa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libb/injector.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    14ca9acf3e9f89b4995193ea2dcf021b


    Headers

    Imports

    Exports

    Sections