General

  • Target

    11.zip

  • Size

    655KB

  • MD5

    cc9c1dfb80cb0e699b7c1c86a33428ec

  • SHA1

    3997bf6fe0674bd944d9b4a0bc3f32da1fa0d6af

  • SHA256

    5458d0c76248f60ae4c24943625e3447ee8f58f8ae5c2e6990e0c6d1b214dbd1

  • SHA512

    7894efb7fd2c32e694eaca176a1121b92a6a23cead13e590861895194ca83c65d8d178ed39bdc3ce0de138b074f054a3fa9fef336dd9d513700249752213c4f7

  • SSDEEP

    12288:z3AQnPyLZdddjqMiKuuK7WHAieWY90YxVr0BgaLSrPCStl18Z3BzBfbzB:z3AQPyLZ5FvFHj60YwACStlCRTd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.ini
  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WimBootCompress.ini
  • Win32_DeviceGuard.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d3461d9f3ccc73aa98e1774ded0b0159


    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections