General

  • Target

    bbbb.zip

  • Size

    4.4MB

  • MD5

    a114026412e798029a8d1db690c16f70

  • SHA1

    7e44807d21b4b918584eb70a62839daeb91c0863

  • SHA256

    a604cedca56a1982f5ae38039c46dd8dc10a414309621fc13d0b54533f53b971

  • SHA512

    768e0c6b797322985025cee35376ff9040ebe2b08bef21fc3ce71888ea5fc82d8bdf52f44a177aadc6683f44490574627f764db7e01335be5b58e88d79f94a06

  • SSDEEP

    98304:qhRFY89YYc9jh23redpmQRZCPtuP6hKAEiIGPfqCPY6hKUEiIGPfQCPzq1wFXa+:qxYoY59V0redpmQRZ0tQ6A6q0Y6AmQ0V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbbb.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cksini (2).exe
    .exe windows:5 windows x86 arch:x86

    748ba3d33edbb3b82dfd3a86267de575


    Headers

    Imports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • false/camera_mf_trace.wprp
    .xml
  • false/external_extensions.json
  • false/mf_trace.wprp
    .xml
  • false/vp8decoder.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    8b7c6930eb0fdf061b0ef57bef61e484


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • false/vp8encoder.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    7ba762a7cdd87ce0325ece4efb88e233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • false/webmmux.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    25cf249fb1174de8ba915c4a2462f804


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • install_state.json
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • true/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • true/vp8decoder.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    8b7c6930eb0fdf061b0ef57bef61e484


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • true/vp8encoder.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    7ba762a7cdd87ce0325ece4efb88e233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • true/webmmux.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    25cf249fb1174de8ba915c4a2462f804


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • true/widevinecdm.dll.sig
  • webmmux.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    25cf249fb1174de8ba915c4a2462f804


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • webmvorbisencoder.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    6aeabf27d25617644e24c000ed77b18a


    Code Sign

    Headers

    Imports

    Exports

    Sections