General

  • Target

    1612a197144adfe1b30ca1c680e93d2ee916d46be0b7b163bf5afb212cff4155.lzh

  • Size

    1.0MB

  • MD5

    0e359e0015e712e892ec5b680c68cfcc

  • SHA1

    62e4dffb7bdd5011e8715ffdbd4ff6a9cdaaa827

  • SHA256

    1612a197144adfe1b30ca1c680e93d2ee916d46be0b7b163bf5afb212cff4155

  • SHA512

    d7c2291f78c6dbbceb90061e6a20b08f575641cae0d76c8e0d8b30d307d4e878af81e0053f6291e95c3a6ca5991230f6097b43601140b06b48faec50fc314daf

  • SSDEEP

    24576:8+Nd8zfriTrzIEkO50kgaVJRxie41v3NN+asZIp3Ks7:qcrUEf+BIYe8PGcKs7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1612a197144adfe1b30ca1c680e93d2ee916d46be0b7b163bf5afb212cff4155.lzh
    .lzh
  • Quotation.exe
    .exe windows:5 windows x86 arch:x86

    3f91aceea750f765ef2ba5d9988e6a00


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    4f33ea844b96a31c8f4690530ba63854


    Headers

    Imports

    Exports

    Sections

  • $_41_/Emmens.udk
  • $_41_/Induktionskogezoner.Nsk
  • $_41_/Proprietrer.bet
  • $_41_/Smalfilmerens.Sem
  • $_41_/Trikstanks.pra
  • $_41_/boyaus.rom
  • $_41_/gear.dra
  • $_41_/jagtfalk.ill
  • $_41_/regill.ful
  • $_41_/sortlistningens.txt