Overview

overview

10

Static

static

3

2e38ec7bb6...44.exe

windows7-x64

7

2e38ec7bb6...44.exe

windows10-2004-x64

10

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e38ec7bb6b82799b0c016634cd39748b0ace2e889cf9fcdb5550f293a123344.exe

  • Size

    717KB

  • MD5

    8d145a0a9e1675eacae38f75bd733a4d

  • SHA1

    cb83fb1a99a5969f5d73f2f4fe7baa1552f5503b

  • SHA256

    2e38ec7bb6b82799b0c016634cd39748b0ace2e889cf9fcdb5550f293a123344

  • SHA512

    39614bb76e55c3f0064de266cbfaa7232582ce078d3d06797839863ffb678b6dee438cf36a5f668b13cecc30ce096c36f623d302046e9c47b7b6e255f9785170

  • SSDEEP

    12288:YTNq+SR77qKz7eAhtWQ+tqMSPIUpsgTylZV5kaurAKyOgRRxye:YTcdaieAhtWXqMNUpNSZV5kae6Oc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e38ec7bb6b82799b0c016634cd39748b0ace2e889cf9fcdb5550f293a123344.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • autocollimations/Datacenter133.fit
  • autocollimations/Denationaliserings.Sok
  • autocollimations/Transaktioners.sai
  • autocollimations/ekstrabetaling.Kog
  • autocollimations/mandant.txt
  • autocollimations/toogtyvende.imp