General

  • Target

    CWindows.zip

  • Size

    4.6MB

  • MD5

    29dee358230ec733f66d9c2138522679

  • SHA1

    9c4eb6534daba62e5e42d3643b72c26c549aa7dc

  • SHA256

    a5ea69c6080e807e99cb7fa70ab995725250220151ee3e55f0811a47f4cba6e3

  • SHA512

    e988305e36fb25dac22baf3cb415dea90f655536cec11c2a87a5f38b677569326e4a6e3bc956941c23c23600146aab026d0b53a44cfb8c71ae7f74b2d5eebe45

  • SSDEEP

    98304:xVKiu2q9/sY/uXDSfzAgfpKDJasRiTb1SZzZ4DoornG8y7VMW:qiu5LAgxKkscb1SZdSxKqW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • CWindows.zip
    .zip
  • Core.xml
  • DirectX.log
  • DtcInstall.log
  • HelpPane.exe
    .exe windows:10 windows x64 arch:x64

    25bd8cfe71808f06ece80231211e68cb


    Headers

    Imports

    Sections

  • PFRO.log
  • Sysmon.exe
    .exe windows:6 windows x64 arch:x64

    a039666f8d08dd16e0909469da998438


    Code Sign

    Headers

    Imports

    Sections

  • SysmonDrv.sys
    .dll windows:6 windows x64 arch:x64

    342fc705bf2a2c546e78c3e539ecd5fc


    Code Sign

    Headers

    Imports

    Sections

  • WMSysPr9.prx
  • WindowsShell.Manifest
    .xml
  • WindowsUpdate.log
  • bfsvc.exe
    .exe windows:10 windows x64 arch:x64

    54245422db2bc4b8b196e28748bce9fe


    Headers

    Imports

    Sections

  • explorer.exe
    .exe windows:10 windows x64 arch:x64

    ed29db09a3da7714b9f5b1fc7db4dd57


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hh.exe
    .exe windows:10 windows x64 arch:x64

    d3d9c3e81a404e7f5c5302429636f04c


    Headers

    Imports

    Sections

  • lsasetup.log
  • mds.lkeys
  • mib.bin
  • notepad.exe
    .exe windows:10 windows x64 arch:x64

    0e6bccf88f4251909d1746dba78cba57


    Headers

    Imports

    Sections

  • regedit.exe
    .exe windows:10 windows x64 arch:x64

    29c325da8faadf165e12486bd336238f


    Headers

    Imports

    Sections

  • setupact.log
  • splwow64.exe
    .exe windows:10 windows x64 arch:x64

    667fd80c4ea4fc599f77be2902ac98d1


    Headers

    Imports

    Sections

  • system.ini
  • twain_32.dll
    .dll windows:10 windows x86 arch:x86

    ddb14e5fc95c0690491e1745b60b6efe


    Headers

    Imports

    Exports

    Sections

  • win.ini
  • winhlp32.exe
    .exe windows:10 windows x86 arch:x86

    0dfde2c713801a5c7e6dc0108384fb68


    Headers

    Imports

    Sections

  • write.exe
    .exe windows:10 windows x64 arch:x64

    90a23f469ba0443719430cba4569b220


    Headers

    Imports

    Sections