General

  • Target

    1f8ec7a76f4486fdff94743275b2d65e1e4c871f7f933ed5c65c1dfca22909be.zip

  • Size

    36.3MB

  • MD5

    bcdda8d6998c1ba5130da31e35e5742e

  • SHA1

    503c7cd597310f98ad95e307c72f7be861ce0c0b

  • SHA256

    1f8ec7a76f4486fdff94743275b2d65e1e4c871f7f933ed5c65c1dfca22909be

  • SHA512

    6bf475919fae4f212a5cf15f230a03cdcbd48abc8e251aa0551412f152e9f17f41f337e063beeab1aa3dce074adc0fd5d3f119e191c4e45dcb292eb1f53dd626

  • SSDEEP

    786432:uuyvBzl1nlmWXvt6EnUH4uQkM29pPjBIcfSIMa1KZW8QoI9yo8j:W5tHrkhNSIIiyo8j

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f8ec7a76f4486fdff94743275b2d65e1e4c871f7f933ed5c65c1dfca22909be.zip
    .zip
  • Repository/cimwin32.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3e0fc5fc148d8a2f4281bca9fa8a8166


    Headers

    Imports

    Exports

    Sections

  • Repository/dnsclientcim.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    cfca51f8bf1bf8f90661aaeef676fdc5


    Headers

    Imports

    Exports

    Sections

  • Repository/dnsclientpsprovider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    47a7811f3d8736ad100cd1666b45c8f8


    Headers

    Imports

    Exports

    Sections

  • Repository/dsprov.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    f512e8a06eebaee00a6ec0e81b77e259


    Headers

    Imports

    Exports

    Sections

  • SR/spsreng.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    85ca5e894a94fccd6b54c5abed4ff89f


    Headers

    Imports

    Exports

    Sections

  • SR/spsrx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    623052070b7eb1d9cebfa38f9eb93fca


    Headers

    Imports

    Exports

    Sections

  • SR/srloc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d83c436f2c45db50cdd9841f0ed5cf06


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/SpeechUX.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    c4f080c7031350ab35d18be177a02112


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/SpeechUXPS.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    8829fd2a260d90741120b084abeb8d0b


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/sapi.cpl
    .dll regsvr32 windows:10 windows x64 arch:x64

    02aeb6e42acafca4d9e23e7cc11e41ec


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/speechuxcpl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9602aa96e1595eb184b0fde3b2bd3ceb


    Headers

    Imports

    Exports

    Sections

  • TTS/MSTTSEngine.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    59c93fe60a75ce27609b1934013528d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TTS/MSTTSLoc.dll
    .dll windows:10 windows x64 arch:x64

    936851e62dbbc290e5656d1905192998


    Headers

    Imports

    Exports

    Sections

  • UMDF/EhStorPwdDrv.dll
    .dll windows:10 windows x64 arch:x64

    534a0927defe4d5bb14c2ca60ad1d5ed


    Headers

    Imports

    Exports

    Sections

  • UMDF/HidTelephony.dll
    .dll windows:10 windows x64 arch:x64

    7143fc73024f2f4e0fdd7e4df5c226e8


    Headers

    Imports

    Exports

    Sections

  • UMDF/IddCx.dll
    .dll windows:10 windows x64 arch:x64

    0bd8e168fad73542a802ed0ffedd1cce


    Headers

    Imports

    Exports

    Sections

  • UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll
    .dll windows:10 windows x64 arch:x64

    abbac69270f8a5d2e4dfeb1d2908df5e


    Headers

    Imports

    Exports

    Sections

  • UMDF/NfcCx.dll
    .dll windows:10 windows x64 arch:x64

    ff52f8de87fa8680782f83a0278acd52


    Headers

    Imports

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-Eventing-Controller-L1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-devices-config-L1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/API-MS-Win-devices-config-L1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • downlevel/api-ms-win-eventing-consumer-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • launch-v3.17.msi
    .msi