General

  • Target

    33.zip

  • Size

    2.0MB

  • MD5

    6186f34c1711a00dc417e47ceb97fb7f

  • SHA1

    39cd8e0ec8ce8c4505289323d832af733098351d

  • SHA256

    e66ae0ac443b5140a1b35b5aaa6899eea296d9d633988eb044a395a34a887431

  • SHA512

    4b2c9405cd53dc6d9a8b04339472c640855d8a5874aeee7d96a8f6310c561cba318741717458bbca246f3a4009ea52f9c088c66f4c0545ad06d024a5b6f4be07

  • SSDEEP

    49152:Eds5IUlEDThXBJOhHbLfD52MHy1316AXSkAPoa2oQvWei9FM3:EZ5FXaNDbyv6sLu2opeN3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • 33.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    a6ab0ac73d733ac12db0454e9a7326f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KBDTAM99.DLL
    .dll windows:10 windows x64 arch:x64


    Headers

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    285f1795dfcbaca038bd1222a3a96f0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TsUsbRedirectionGroupPolicyExtension.dll
    .dll windows:10 windows x64 arch:x64

    54be2b7c7bffa0cee4af2cdb42cf9085


    Headers

    Imports

    Exports

    Sections

  • WiaExtensionHost64.dll
    .dll windows:10 windows x64 arch:x64

    39f7abf43a82831d6b4792c9ce9d440f


    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • client32u.ini
  • comcat.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5c317b4785c1c3ce395f95788fb0f892


    Headers

    Imports

    Exports

    Sections

  • getuname.dll
    .dll windows:10 windows x64 arch:x64

    b5f02961939c3c6edf46e7379484f547


    Headers

    Imports

    Exports

    Sections

  • ifsutilx.dll
    .dll windows:10 windows x64 arch:x64

    f0120248cc8015539d8aaf42f8d64a47


    Headers

    Imports

    Exports

    Sections

  • logos/8ball1.bmp
  • logos/andre.bmp
  • logos/camp1.bmp
  • logos/chick1.bmp
  • logos/chuckskull.bmp
  • logos/devl1.bmp
  • logos/gun1.bmp
  • logos/lambda.bmp
  • logos/skull.bmp
  • logos/smiley.bmp
  • logos/splatt.bmp
  • logos/tiki.bmp
  • logos/v_1.bmp
  • mprext.dll
    .dll windows:10 windows x64 arch:x64

    8c4eb7a549c77fac0467b83cebc5d650


    Headers

    Imports

    Exports

    Sections

  • msidle.dll
    .dll windows:10 windows x64 arch:x64

    14fd2ad264e565ddd6fbeaa5eeae6e57


    Headers

    Imports

    Sections

  • msidntld.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • panmap.dll
    .dll windows:10 windows x64 arch:x64

    e9dbf5df0a9e862645294faf11ef4307


    Headers

    Imports

    Exports

    Sections

  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    f8282f99f39314d8a05a0ff650027272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prflbmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • provdiagnostics.dll
    .dll windows:10 windows x64 arch:x64

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • wiatrace.dll
    .dll windows:10 windows x64 arch:x64

    7146ee63c835f34bc9729fe5ed9f8dbe


    Headers

    Imports

    Exports

    Sections