General

  • Target

    XmS.rar

  • Size

    18.7MB

  • MD5

    e435cf094cc89dc2c7e631824c56868b

  • SHA1

    2baa0947c2d01daeb5e1b72f19f1dd31f916435e

  • SHA256

    e02386ddc6215fda512f352df0b1456bb17ac8e15ed05f631b1d18b466755adc

  • SHA512

    4f5ee6026090db95efd0061fdbbf87b6217ffc048174e59a8c19dda019b757a9f9952f9a245d047dd130a9bd21b88e63b5faa9863a1303844defe7eff6f0b429

  • SSDEEP

    393216:UvXHYBQorHnPWC7KvkSLfnhr4tzE4LiZu4ow6XSiB0h7rhr/KD93:UvH3YH7e9Lfhr49E4LiZu4ow6XzBknh6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • XmS.rar
    .rar

    Password: 2024

  • 0FC343C0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    482ab440211976ea17ec54e3ce97e53d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • B7091C83.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    d811d71710ad58776155b7a8da1fa9db


    Code Sign

    Headers

    Imports

    Sections

  • CbsMsg.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    3a6fd3b46b76f3ce7178b2e11f50b05a


    Code Sign

    Headers

    Imports

    Sections

  • DICTS/mshwchtrIME.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024


    Headers

    Sections

  • PresentationCore/PresentationCore.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PresentationCore/System.Data.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    025065f1f653f3ecea3431275b0ac9ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RUN.exe
    .exe windows:4 windows x64 arch:x64

    Password: 2024

    bd57c285d6a5e2a5490823348902be43


    Headers

    Imports

    Sections

  • mscorlib/SettingsHandlers_InputPersonalization.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    b1ed2f734ce31b7a7587324d68b842c5


    Headers

    Imports

    Exports

    Sections

  • mscorlib/SettingsHandlers_ManagePhone.dll
    .dll windows:10 windows x64 arch:x64

    d0cb94157f279cdb57d7e3c1d820c74a


    Headers

    Imports

    Exports

    Sections

  • mscorlib/SettingsHandlers_WorkAccess.dll
    .dll windows:10 windows x64 arch:x64

    f0058412f3431590bb1827e4300affd4


    Headers

    Imports

    Exports

    Sections

  • mscorlib/SettingsHandlers_nt.dll
    .dll windows:10 windows x64 arch:x64

    7ae06e70115094afbbb6316378531a7e


    Headers

    Imports

    Exports

    Sections

  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/mscorlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normidna.nlp
  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfc.nlp
  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfd.nlp
  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkc.nlp
  • mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkd.nlp
  • mshwkorrIME.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • twain_32.dll
    .dll windows:10 windows x86 arch:x86

    316cd668ed705c998eae8d3bd7bd168f


    Headers

    Imports

    Exports

    Sections

  • wrpintapi.dll
    .dll windows:10 windows x64 arch:x64

    88d112d340f48a8e711dbb236eff1b92


    Headers

    Imports

    Exports

    Sections