General

  • Target

    xcd2va.rar

  • Size

    1.8MB

  • MD5

    1ca1e9f1e1df959c616b79d890d00f1e

  • SHA1

    aaca22407301bf5df5d670b09af5ffbb804fd857

  • SHA256

    3aa9ed2f922ba059563db29ab2848ba27ca0e12d77005980f6c960ce53d6e490

  • SHA512

    da5552460aebf16e4e8c7e9f3773a7b4c01a0148eda5d807fee88b75d3cf814611c14b0352e03343a8a550e1ce65479c7976046bff7d6b161337ef1df2076a0b

  • SSDEEP

    49152:XKsKxWAF82B0m+wOdES+nwnW3zvN7HLFPbl/HSy0S5LEry4bor80F:XKp50m+wCES+nfzNZTN1j5orykP2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xcd2va.rar
    .rar
  • HwidSpoofer.com.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • place at C windows/fud.exe
    .exe windows:6 windows x64 arch:x64

    f7f86c4223f7ae0e15056a907f43bfb5


    Code Sign

    Headers

    Imports

    Sections

  • place at C windows/gay.sys
    .sys windows:10 windows x64 arch:x64

    df552bc149e9cfef3db42fe67d0113d2


    Code Sign

    Headers

    Imports

    Sections