General

  • Target

    CWindowsSysWOW64-2.zip

  • Size

    2.6MB

  • MD5

    5ab82ba5c1892d570f1a3b6f02b9d0fd

  • SHA1

    bb70f15c02827b76cf1a71437df3249d2ea93b05

  • SHA256

    e6178e179fd47b8099c848baf57dd4f56b9860f52faa9843fdb994d18ef9a7cb

  • SHA512

    9d9c0f4f8c8f42e9dc5b65644f808d0057ed4d1d05de09cddc7f05c3d4cbb0b903ef1b4c6a712b3d372d1e73b49dea701f07dc4ebf190cb5f6ba51be3d9ac181

  • SSDEEP

    49152:Qkf7ku446sVm/97KO9z5py2AfCKtV7nHBCsO3IG2bwMqjZtf9CA/Rt:QOkQ6sVgh9z/y2AfrY71MqXf9t/z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • CWindowsSysWOW64-2.zip
    .zip
  • SystemPropertiesRemote.exe
    .exe windows:10 windows x86 arch:x86

    b788892ae84ba86201a726810f01cb07


    Headers

    Imports

    Sections

  • SystemUWPLauncher.exe
    .exe windows:10 windows x86 arch:x86

    b7c2abb26b91fb0be005e4be785169ca


    Headers

    Imports

    Sections

  • TCPSVCS.EXE
    .exe windows:10 windows x86 arch:x86

    7ec53fbe050a90703b67a98fcb8bcfcc


    Headers

    Imports

    Sections

  • TRACERT.EXE
    .exe windows:10 windows x86 arch:x86

    0727b2e083dceae4bc2d3b322a5a2171


    Headers

    Imports

    Sections

  • TSTheme.exe
    .exe windows:10 windows x86 arch:x86

    9ace85baf61f72e5611a8bf2d6705896


    Headers

    Imports

    Sections

  • TapiUnattend.exe
    .exe windows:10 windows x86 arch:x86

    38d2f52a7bb6275bb518dee25030d230


    Headers

    Imports

    Sections

  • Taskmgr.exe
    .exe windows:10 windows x86 arch:x86

    9d6489829971c2f00e11012930dbda53


    Code Sign

    Headers

    Imports

    Sections

  • ThumbnailExtractionHost.exe
    .exe windows:10 windows x86 arch:x86

    5f8e2eb746b52688c864a664a7814623


    Headers

    Imports

    Sections

  • TokenBrokerCookies.exe
    .exe windows:10 windows x86 arch:x86

    a8d3571a1e85cbe58ef0e69ece31ba95


    Headers

    Imports

    Sections

  • TpmInit.exe
    .exe windows:10 windows x86 arch:x86

    5bf7394f35e02422597ade969d5868e8


    Headers

    Imports

    Sections

  • TpmTool.exe
    .exe windows:10 windows x86 arch:x86

    c72fd56e39edabc400d4a0fdfa641f14


    Headers

    Imports

    Sections

  • UserAccountBroker.exe
    .exe windows:10 windows x86 arch:x86

    47e33a59d99b513b43234de272f7d64b


    Code Sign

    Headers

    Imports

    Sections

  • UserAccountControlSettings.exe
    .exe windows:10 windows x86 arch:x86

    3d3da7592ca6678da141b25d2786f1ac


    Headers

    Imports

    Sections

  • Utilman.exe
    .exe windows:10 windows x86 arch:x86

    9ee1391910598a8fcab5016fc8ea32cd


    Headers

    Imports

    Sections

  • systray.exe
    .exe windows:10 windows x86 arch:x86

    bdee2028e64a4c6e54156264705e7d10


    Headers

    Imports

    Sections

  • takeown.exe
    .exe windows:10 windows x86 arch:x86

    64efc3f1223e2f39fed79fe437dd2a4a


    Headers

    Imports

    Sections

  • tar.exe
    .exe windows:10 windows x86 arch:x86

    3b8e1f37ec2574e3b9caf88b47efa772


    Headers

    Imports

    Sections

  • taskkill.exe
    .exe windows:10 windows x86 arch:x86

    1b280dbbc4551f2ac95e5f1d993c6f46


    Headers

    Imports

    Sections

  • tasklist.exe
    .exe windows:10 windows x86 arch:x86

    abb2f0f9c3e7fd0fa45df23edfcad54c


    Headers

    Imports

    Sections

  • tcmsetup.exe
    .exe windows:10 windows x86 arch:x86

    eefb875014ecdd920c8da3d31e4c2fcb


    Headers

    Imports

    Sections

  • timeout.exe
    .exe windows:10 windows x86 arch:x86

    cc8350d8e3ec07f59c50bd0d7e531f02


    Headers

    Imports

    Sections

  • tracerpt.exe
    .exe windows:10 windows x86 arch:x86

    9246d8b1e4f80358c529765ee31bdd69


    Headers

    Imports

    Sections

  • ttdinject.exe
    .exe windows:10 windows x86 arch:x86

    e18d7e87c48a288dbc5b51bf17bed805


    Code Sign

    Headers

    Imports

    Sections

  • tttracer.exe
    .exe windows:10 windows x86 arch:x86

    77946aa710659c131067563fab7e31ec


    Code Sign

    Headers

    Imports

    Sections

  • typeperf.exe
    .exe windows:10 windows x86 arch:x86

    33fa1e3f97809e906830dba26e3d87e4


    Headers

    Imports

    Sections

  • tzutil.exe
    .exe windows:10 windows x86 arch:x86

    0a4b6ed4871b1ad7f8328d32493e9dfc


    Headers

    Imports

    Sections

  • unlodctr.exe
    .exe windows:10 windows x86 arch:x86

    e5d62633987b08c59bad977ed08d449c


    Headers

    Imports

    Sections

  • unregmp2.exe
    .exe windows:10 windows x86 arch:x86

    08cf6be2bde79032587ad5ba07627d94


    Headers

    Imports

    Sections

  • upnpcont.exe
    .exe windows:10 windows x86 arch:x86

    7b6ae0b2821019ce4c865988d4d48c14


    Headers

    Imports

    Sections

  • user.exe
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • userinit.exe
    .exe windows:10 windows x86 arch:x86

    95da0916f3f26c42bdbb0c5cdc7e8b39


    Headers

    Imports

    Sections

  • verclsid.exe
    .exe windows:10 windows x86 arch:x86

    bdc7940f5de0db2f5978f34e0bd82ff0


    Headers

    Imports

    Sections