General

  • Target

    1af30897308adc5597a9806f7940202676ed2a32d0b8df87e2f36a2a6b30af22.zip

  • Size

    20.8MB

  • MD5

    295cfb6ae8b388a5c8d80f874d5e8a91

  • SHA1

    ef9493dd22399b1874dfd311babc26b6081f7f79

  • SHA256

    1af30897308adc5597a9806f7940202676ed2a32d0b8df87e2f36a2a6b30af22

  • SHA512

    e0000bf6829e5c4255ffbe8cd55761c4810a55fdb9ca571a9f2da4264ef90943137e95cc2625e42c0f320b0f6e9621375ed5a3021776cd10dd21ca0e0110e9ea

  • SSDEEP

    393216:m2pdj5VJaGomoUsR8dFMuqlLOzrYB/mcFT1MCzP1rs7XX5hDv6zIoZw7h2AyZz2c:mi1PH/cmMZl2amuOGParXXyzIoZwlapd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 1af30897308adc5597a9806f7940202676ed2a32d0b8df87e2f36a2a6b30af22.zip
    .zip
  • proxy.XmSProject/0FC343C0.dll
    .dll windows:10 windows x64 arch:x64

    482ab440211976ea17ec54e3ce97e53d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/B7091C83.dll
    .dll windows:5 windows x86 arch:x86

    d811d71710ad58776155b7a8da1fa9db


    Code Sign

    Headers

    Imports

    Sections

  • proxy.XmSProject/CbsMsg.dll
    .dll windows:10 windows x64 arch:x64

    3a6fd3b46b76f3ce7178b2e11f50b05a


    Code Sign

    Headers

    Imports

    Sections

  • proxy.XmSProject/DICTS/mshwchtrIME.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • proxy.XmSProject/PresentationCore/PresentationCore.dll
    .dll windows:6 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • proxy.XmSProject/PresentationCore/System.Data.dll
    .dll windows:6 windows x86 arch:x86

    025065f1f653f3ecea3431275b0ac9ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/RUN.exe
    .exe windows:4 windows x64 arch:x64

    bd57c285d6a5e2a5490823348902be43


    Headers

    Imports

    Sections

  • proxy.XmSProject/mscorlib/SettingsHandlers_InputPersonalization.dll
    .dll windows:10 windows x64 arch:x64

    b1ed2f734ce31b7a7587324d68b842c5


    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/mscorlib/SettingsHandlers_ManagePhone.dll
    .dll windows:10 windows x64 arch:x64

    d0cb94157f279cdb57d7e3c1d820c74a


    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/mscorlib/SettingsHandlers_WorkAccess.dll
    .dll windows:10 windows x64 arch:x64

    f0058412f3431590bb1827e4300affd4


    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/mscorlib/SettingsHandlers_nt.dll
    .dll windows:10 windows x64 arch:x64

    7ae06e70115094afbbb6316378531a7e


    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/mscorlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normidna.nlp
  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfc.nlp
  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfd.nlp
  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkc.nlp
  • proxy.XmSProject/mscorlib/v4.0_4.0.0.0__b77a5c561934e089/normnfkd.nlp
  • proxy.XmSProject/mshwkorrIME.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • proxy.XmSProject/twain_32.dll
    .dll windows:10 windows x86 arch:x86

    316cd668ed705c998eae8d3bd7bd168f


    Headers

    Imports

    Exports

    Sections

  • proxy.XmSProject/wrpintapi.dll
    .dll windows:10 windows x64 arch:x64

    88d112d340f48a8e711dbb236eff1b92


    Headers

    Imports

    Exports

    Sections