General

  • Target

    1394bde6dfa6e9f1b20492b67b3dddaf12ffab4699b581f48ec55245fa75841f.zip

  • Size

    2.2MB

  • MD5

    d033258631c7c640c40660909a4eff5a

  • SHA1

    98b50cb5c66fd86aa0a76c3b92976a2423489a7a

  • SHA256

    1394bde6dfa6e9f1b20492b67b3dddaf12ffab4699b581f48ec55245fa75841f

  • SHA512

    49d1b540b3351f3cf4c649b0f1d6b362229b2bd650f5db631024cc668e3dde2c3984d081e1d7dcc7853bd5afb5912b0bfa70a98024de7722708b86156b47e181

  • SSDEEP

    49152:ks6J6h2SFFGf0RBNTQfYc9jh23eWeB3/YSBm7WIqRFzkTSxu+E1ZlblEDThXBJOD:lhRFY89YYc9jh23redpmQR0f16FXaD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1394bde6dfa6e9f1b20492b67b3dddaf12ffab4699b581f48ec55245fa75841f.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cksini (2).exe
    .exe windows:5 windows x86 arch:x86

    748ba3d33edbb3b82dfd3a86267de575


    Headers

    Imports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections