General

  • Target

    fa1f7281b11b78f9cfc44859f197926e79f6d138b753bfb8f636c5e4aff83eb6.zip

  • Size

    2.3MB

  • MD5

    0b50db5454265665c37d293b1fac024c

  • SHA1

    4cb544dad495a6ffb59a8de00f5002b4d72cc433

  • SHA256

    fa1f7281b11b78f9cfc44859f197926e79f6d138b753bfb8f636c5e4aff83eb6

  • SHA512

    f3678f9ed9297cd9fe80a06c28c073d474ca035c6aa3d60b6d573445183dc878b486399d0ab44a45d0323c63052a64a3366f2b14f1d001cbf4fed105e3116947

  • SSDEEP

    49152:a51ZlQlEDThXBJOhHvh6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqRRakTSk:E1ZFXa/hRFY89YYc9jh23redpmQR14mj

Score
1/10

Malware Config

Signatures

Files

  • fa1f7281b11b78f9cfc44859f197926e79f6d138b753bfb8f636c5e4aff83eb6.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LogoDev.png
    .png
  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VERSION
  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • delegatedWebFeatures.sccd
    .xml
  • install_state.json
  • manifest.json
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • new_delegatedWebFeatures.sccd
    .xml
  • nskbfltr.inf
  • nsm_vpro.ini
  • package_metadata
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • preloaded_data.pb
  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • temp/75E7586FAF30011Cs
  • temp/8C071BA874B720F3s
  • temp/Logo.png
    .png
  • temp/LogoBeta.png
    .png
  • temp/LogoCanary.png
    .png
  • temp/quit_2.ico