General

  • Target

    System32Problems9.zip

  • Size

    23.4MB

  • MD5

    de82464454ea84b16f3586fd5ce7f0a8

  • SHA1

    14fa72d90197c01172f03fa98004d2de922b6b8b

  • SHA256

    b4347bcbf6f36b66836194fefcce01fad1216c44b020b8f4ae19d579aa3e9d52

  • SHA512

    f59744c69eea8189f25a0b26b0ca82115a452b3c656ad1b078c431ea4199fcd0f95cde9e65c5155d95e339771fb548cb57b4043a9f4fd98666ee7185e27e18f9

  • SSDEEP

    393216:Lwp8uR6DeJFgEIR+wzS48qUPY+4QQ3sbE47bwBPwRf79RhtweznHSj:LwpxR6DeJ6EIR+wzP2PZ4QQL4/wSV/HA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 79 IoCs

    Checks for missing Authenticode signature.

Files

  • System32Problems9.zip
    .zip
  • AUDIOKSE.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    0171c8b34a2862ac3a0bc42087150e58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppMon.dll
    .dll windows:10 windows x64 arch:x64

    89ce6363d54faf6dbefa67421de8ec1f


    Headers

    Imports

    Exports

    Sections

  • AppReadiness.dll
    .dll windows:10 windows x64 arch:x64

    ee6b85a4af1ba535cb972418f9a9c8ef


    Headers

    Imports

    Exports

    Sections

  • AppResolver.dll
    .dll windows:10 windows x64 arch:x64

    1d4d182c599d17d98ff44b6f0a898815


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppXApplicabilityBlob.dll
    .dll windows:10 windows x64 arch:x64

    c415be19dba4fe4d36996e13146e882a


    Headers

    Imports

    Exports

    Sections

  • AppXDeploymentClient.dll
    .dll windows:10 windows x64 arch:x64

    ef857e4bfa9b02ee830b6b262156aab9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppXDeploymentExtensions.desktop.dll
    .dll windows:10 windows x64 arch:x64

    1e9b4496f58bd2a40bd7a4fb463f5d3d


    Headers

    Imports

    Exports

    Sections

  • AppXDeploymentExtensions.onecore.dll
    .dll windows:10 windows x64 arch:x64

    6b46dce4f42cc71b088646721d08cf11


    Headers

    Imports

    Exports

    Sections

  • AppXDeploymentServer.dll
    .dll windows:10 windows x64 arch:x64

    abf1ccba0aac142318228722540e10f0


    Headers

    Imports

    Exports

    Sections

  • AppointmentActivation.dll
    .dll windows:10 windows x64 arch:x64

    4f57dfeddd35a1e9a150167123a9c33e


    Headers

    Imports

    Exports

    Sections

  • AppointmentApis.dll
    .dll windows:10 windows x64 arch:x64

    d8f3e49e3723a9815091a15951718c71


    Headers

    Imports

    Exports

    Sections

  • AppxAllUserStore.dll
    .dll windows:10 windows x64 arch:x64

    a1348c8ef0d55c8673b578a6c2e76d12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppxApplicabilityEngine.dll
    .dll windows:10 windows x64 arch:x64

    f01860ecd0611fab95a06844f3602c75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppxPackaging.dll
    .dll windows:10 windows x64 arch:x64

    4360d732d900100006eed74214588fdc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppxSip.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    e3adbc205af4b67c388dbdfd2f9be43f


    Headers

    Imports

    Exports

    Sections

  • AppxStreamingDataSourcePS.dll
    .dll windows:10 windows x64 arch:x64

    c10ddfdb5d535fb183a8bc910be3b7a2


    Headers

    Imports

    Exports

    Sections

  • AppxSysprep.dll
    .dll windows:10 windows x64 arch:x64

    b6e274bd2afd675df92bb11f92cb3261


    Headers

    Imports

    Exports

    Sections

  • Apx01000.dll
    .dll windows:10 windows x64 arch:x64

    a46846f1f99080b2b6539e1352892899


    Headers

    Imports

    Exports

    Sections

  • AssignedAccessRuntime.dll
    .dll windows:10 windows x64 arch:x64

    992f42a5bd0c8bd94efb8a5c29e3a575


    Headers

    Imports

    Exports

    Sections

  • AudioEndpointBuilder.dll
    .dll windows:10 windows x64 arch:x64

    84e0b0e51f9d86edce3b85ffb206d399


    Headers

    Imports

    Exports

    Sections

  • AudioEng.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    71d9cf8be5fc6d6b97364f9766912856


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioHandlers.dll
    .dll windows:10 windows x64 arch:x64

    6b6045a94063a5cd99e452dbd923bbcd


    Headers

    Imports

    Exports

    Sections

  • AudioSes.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    0d98949807bf291a8b0fc00e5cbbb168


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AudioSrvPolicyManager.dll
    .dll windows:10 windows x64 arch:x64

    91eb303356231525f018ac3a966c8170


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AuthBroker.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    8bdf7b01b279fd473ac7dae4a5bbe4a9


    Headers

    Imports

    Exports

    Sections

  • AuthBrokerUI.dll
    .dll windows:10 windows x64 arch:x64

    84ec67ed6c9e2ff61a32cad6ab9df90a


    Headers

    Imports

    Exports

    Sections

  • AuthExt.dll
    .dll windows:10 windows x64 arch:x64

    ecf8c685ebda224d90ea24ecc21906d2


    Headers

    Imports

    Exports

    Sections

  • AuthFWGP.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ac903dd308939b1de6e2edc954fb7082


    Headers

    Imports

    Exports

    Sections

  • AuthFWSnapin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AuthFWWizFwk.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AuthHostProxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3dcf97cf9146b02db0f632fac0a41c15


    Headers

    Imports

    Exports

    Sections

  • AutomaticAppSignInPolicy.dll
    .dll windows:10 windows x64 arch:x64

    c23dba0ae84d9e4fe46d3cfbac9d930f


    Headers

    Imports

    Exports

    Sections

  • AxInstSv.dll
    .dll windows:10 windows x64 arch:x64

    b3ef2d5baae15edadafe1fbd5b28d285


    Headers

    Imports

    Exports

    Sections

  • AzSqlExt.dll
    .dll windows:10 windows x64 arch:x64

    d51dc3c7fc3c0d48f3e79eca4bd3d952


    Headers

    Imports

    Exports

    Sections

  • BCP47Langs.dll
    .dll windows:10 windows x64 arch:x64

    d289274037b3b3ff7d9155fb23eda361


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BCP47mrm.dll
    .dll windows:10 windows x64 arch:x64

    96c1469120d23879739c5c108ed3b812


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BFE.DLL
    .dll windows:10 windows x64 arch:x64

    2ca88a31f7ab1adc709b35aa8d49370a


    Headers

    Imports

    Exports

    Sections

  • BackgroundMediaPolicy.dll
    .dll windows:10 windows x64 arch:x64

    ddb1354ccdbbcbc159374b84d5400d68


    Headers

    Imports

    Exports

    Sections

  • BamSettingsClient.dll
    .dll windows:10 windows x64 arch:x64

    b792d9235d2982757c0ec6800247e922


    Headers

    Imports

    Exports

    Sections

  • BarcodeProvisioningPlugin.dll
    .dll windows:10 windows x64 arch:x64

    9e994126c6b06e1b7cdf54652c422896


    Headers

    Imports

    Exports

    Sections

  • BcastDVRBroker.dll
    .dll windows:10 windows x64 arch:x64

    de32a0627bd9fded5c28fb8cae8c0d40


    Headers

    Imports

    Exports

    Sections

  • BcastDVRClient.dll
    .dll windows:10 windows x64 arch:x64

    c806f109377692d4efeb52644e633c74


    Headers

    Imports

    Exports

    Sections

  • BcastDVRCommon.dll
    .dll windows:10 windows x64 arch:x64

    9e0232d7ef7cd0d38b407b8cf23f0692


    Headers

    Imports

    Exports

    Sections

  • BdeHdCfgLib.dll
    .dll windows:10 windows x64 arch:x64

    0561832dedf5ee8989087224c333bc2b


    Headers

    Imports

    Exports

    Sections

  • BingASDS.dll
    .dll windows:10 windows x64 arch:x64

    67ac2f3a2a929b0d9d27d4d07679312e


    Headers

    Imports

    Exports

    Sections

  • BingFilterDS.dll
    .dll windows:10 windows x64 arch:x64

    4e6fe2ab19e8816e4fc8ae7256af612a


    Headers

    Imports

    Exports

    Sections

  • BingMaps.dll
    .dll windows:10 windows x64 arch:x64

    b70aa12ed9096e15f6c9eb9be95ea739


    Headers

    Imports

    Exports

    Sections

  • BingOnlineServices.dll
    .dll windows:10 windows x64 arch:x64

    0993f9c26a9781ca845d65a5ba42d011


    Headers

    Imports

    Exports

    Sections

  • BioCredProv.dll
    .dll windows:10 windows x64 arch:x64

    9db98ae85828ccf72efa5d1986f2bbae


    Headers

    Imports

    Exports

    Sections

  • BitLockerCsp.dll
    .dll windows:10 windows x64 arch:x64

    80d95f27224378159424888dd3e044a2


    Headers

    Imports

    Exports

    Sections

  • BitsProxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    8c7a4044b84faf8276495f83ca66b2f1


    Headers

    Imports

    Exports

    Sections

  • appraiser.dll
    .dll windows:10 windows x64 arch:x64

    480647427bcdd88a5f25604acdeca963


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • apprepapi.dll
    .dll windows:10 windows x64 arch:x64

    440394cf511f44362e6ac5dadfc74676


    Headers

    Imports

    Exports

    Sections

  • appsruprov.dll
    .dll windows:10 windows x64 arch:x64

    223960ee3139959740b111cb99a9c02b


    Headers

    Imports

    Exports

    Sections

  • archiveint.dll
    .dll windows:10 windows x64 arch:x64

    00b36de3cc5169cafd744a22204207e3


    Headers

    Imports

    Exports

    Sections

  • asferror.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • aspnet_counters.dll
    .dll windows:6 windows x64 arch:x64

    3971ed53a67523d643e364cb911938ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • asycfilt.dll
    .dll windows:10 windows x64 arch:x64

    6c8e2634484a0c1a9896886fcbe355a2


    Headers

    Imports

    Exports

    Sections

  • atl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    75fe4d242cdb81c8fd19f8165a4d313d


    Headers

    Imports

    Exports

    Sections

  • atlthunk.dll
    .dll windows:10 windows x64 arch:x64

    0c6d81f57245aca5d959363a751af7f2


    Headers

    Imports

    Exports

    Sections

  • atmlib.dll
    .dll windows:10 windows x64 arch:x64

    cb433da08ef67945b1cb37ef100e033a


    Headers

    Imports

    Exports

    Sections

  • audioresourceregistrar.dll
    .dll windows:10 windows x64 arch:x64

    291cf19194ec4c7d8e669fedc450f923


    Headers

    Imports

    Exports

    Sections

  • audiosrv.dll
    .dll windows:10 windows x64 arch:x64

    6b0c92d51f3d11af418b69b4e8350980


    Headers

    Imports

    Exports

    Sections

  • auditcse.dll
    .dll windows:10 windows x64 arch:x64

    531ee27a782976eaf0cbb4000eeef395


    Headers

    Imports

    Exports

    Sections

  • auditpolcore.dll
    .dll windows:10 windows x64 arch:x64

    23d36525032044eb4bf2d5db1cb1f782


    Headers

    Imports

    Exports

    Sections

  • authentication.dll
    .dll windows:10 windows x64 arch:x64

    bec8dfc563f7f1c7a54d3aba47ec4509


    Headers

    Imports

    Exports

    Sections

  • authfwcfg.dll
    .dll windows:10 windows x64 arch:x64

    c4ad0d16718d18b1befc3da5c8eca0c0


    Headers

    Imports

    Exports

    Sections

  • authui.dll
    .dll windows:10 windows x64 arch:x64

    783f487551765864e8f0efb9c979c37a


    Headers

    Imports

    Exports

    Sections

  • authz.dll
    .dll windows:10 windows x64 arch:x64

    bcffd8d7d4283c26d0269c2b5bff7376


    Headers

    Imports

    Exports

    Sections

  • autopilot.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9ecc1113444a089dd752c215920605d2


    Headers

    Imports

    Exports

    Sections

  • autopilotdiag.dll
    .dll windows:10 windows x64 arch:x64

    f629bb8789eda421161863c0a2e9ff9d


    Headers

    Imports

    Sections

  • autoplay.dll
    .dll windows:10 windows x64 arch:x64

    dd3b4e4c9caeef639cf80353b4e0b614


    Headers

    Imports

    Exports

    Sections

  • autotimesvc.dll
    .dll windows:10 windows x64 arch:x64

    8f7e503127bde7eb88706cd22ba695da


    Headers

    Imports

    Exports

    Sections

  • avicap32.dll
    .dll windows:10 windows x64 arch:x64

    8c7543f435c4b55b0afdf445a15ed1c4


    Headers

    Imports

    Exports

    Sections

  • avifil32.dll
    .dll windows:10 windows x64 arch:x64

    c763e067c6059e40e36cf0484f7dea20


    Headers

    Imports

    Exports

    Sections

  • avrt.dll
    .dll windows:10 windows x64 arch:x64

    9559d57c55d442418a908480f763176b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • azroles.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3286800f968191097d7ed93c037813d8


    Headers

    Imports

    Exports

    Sections

  • azroleui.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    464d4924cd62b4615c7f0073a773ff15


    Headers

    Imports

    Exports

    Sections

  • basecsp.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    6bf1e93819d2b24c202845b3ae178337


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • basesrv.dll
    .dll windows:10 windows x64 arch:x64

    57bc05d3e17857558dee5d41ff63ffd8


    Headers

    Imports

    Exports

    Sections

  • batmeter.dll
    .dll windows:10 windows x64 arch:x64

    85e1a605d44012634df516a5f55e589e


    Headers

    Imports

    Exports

    Sections

  • bcastdvr.proxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    dcb8e8888cb3f6d5dabd70f6f51d684e


    Headers

    Imports

    Exports

    Sections

  • bcastdvruserservice.dll
    .dll windows:10 windows x64 arch:x64

    40cd1966134cb06042b26f8580efdf9e


    Headers

    Imports

    Exports

    Sections

  • bcd.dll
    .dll windows:10 windows x64 arch:x64

    f188e4ccfee8ca9bc58f1ad2f6535a7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bcdprov.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ede7e008c69cbd24d00cf35a06dfdb98


    Headers

    Imports

    Exports

    Sections

  • bcdsrv.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    017d3e55bba2e24f2eeaae2b00f0a28c


    Headers

    Imports

    Exports

    Sections

  • bcrypt.dll
    .dll windows:10 windows x64 arch:x64

    aba42e023794a1a4c0a6e7d0d04ae277


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bcryptprimitives.dll
    .dll windows:10 windows x64 arch:x64

    39ad65c22ee924ce5251a7d370c63dcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bderepair.dll
    .dll windows:10 windows x64 arch:x64

    77800cbb225bf3a6483a0a4765ac77e2


    Headers

    Imports

    Exports

    Sections

  • bdesvc.dll
    .dll windows:10 windows x64 arch:x64

    6c41daadb0ee25d849e80d72eb601d5d


    Headers

    Imports

    Exports

    Sections

  • bdeui.dll
    .dll windows:10 windows x64 arch:x64

    5a1dc4455ab505bf607c896467517e3f


    Headers

    Imports

    Exports

    Sections

  • bi.dll
    .dll windows:10 windows x64 arch:x64

    abd24111697337a3a339d9ae98ba129b


    Headers

    Imports

    Exports

    Sections

  • bidispl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b45c19be3c865064173ca0b459a6e170


    Headers

    Imports

    Exports

    Sections

  • bindfltapi.dll
    .dll windows:10 windows x64 arch:x64

    cc045e87d950adfda8848675139f1af1


    Headers

    Imports

    Exports

    Sections

  • bisrv.dll
    .dll windows:10 windows x64 arch:x64

    b3672b0edf3102593816965772dbd5de


    Headers

    Imports

    Exports

    Sections

  • bitsigd.dll
    .dll windows:10 windows x64 arch:x64

    f1a4ea24ffd79146e66a1badaefdab97


    Headers

    Imports

    Exports

    Sections

  • bitsperf.dll
    .dll windows:10 windows x64 arch:x64

    9693b61eb765f62eeb39d42ffdd19508


    Headers

    Imports

    Exports

    Sections