General

  • Target

    12022025_1609_build.zip

  • Size

    2.0MB

  • MD5

    a3438bc1060db9dc6d7d287f43259115

  • SHA1

    df33391e922d4ba353dc76c2f38a0bdac56cd591

  • SHA256

    6c3dec03149c475e7d69059169d3a944ce67559c33228ee45030ac18a061aac9

  • SHA512

    0297a9534795cc47f3dfb30ace3cb77fafa28d8dd2a5843598b71bb7dae3966af645739b6e4056db571322073df3dd23dbe89cddace3471a68f68151cd27fc00

  • SSDEEP

    49152:Jds5IUlEDThXBJOhHbLfD52MHy1316AXSkAPoa2oQvWei9FRy:JZ5FXaNDbyv6sLu2opemy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • 12022025_1609_build.zip
    .zip

    Password: infected

  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    a6ab0ac73d733ac12db0454e9a7326f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KBDTAM99.DLL
    .dll windows:10 windows x64 arch:x64

    Password: infected


    Headers

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    285f1795dfcbaca038bd1222a3a96f0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TsUsbRedirectionGroupPolicyExtension.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    54be2b7c7bffa0cee4af2cdb42cf9085


    Headers

    Imports

    Exports

    Sections

  • WiaExtensionHost64.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    39f7abf43a82831d6b4792c9ce9d440f


    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • client32u.ini
  • comcat.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5c317b4785c1c3ce395f95788fb0f892


    Headers

    Imports

    Exports

    Sections

  • getuname.dll
    .dll windows:10 windows x64 arch:x64

    b5f02961939c3c6edf46e7379484f547


    Headers

    Imports

    Exports

    Sections

  • ifsutilx.dll
    .dll windows:10 windows x64 arch:x64

    f0120248cc8015539d8aaf42f8d64a47


    Headers

    Imports

    Exports

    Sections

  • logos/8ball1.bmp
  • logos/andre.bmp
  • logos/camp1.bmp
  • logos/chick1.bmp
  • logos/chuckskull.bmp
  • logos/devl1.bmp
  • logos/gun1.bmp
  • logos/lambda.bmp
  • logos/skull.bmp
  • logos/smiley.bmp
  • logos/splatt.bmp
  • logos/tiki.bmp
  • logos/v_1.bmp
  • mprext.dll
    .dll windows:10 windows x64 arch:x64

    8c4eb7a549c77fac0467b83cebc5d650


    Headers

    Imports

    Exports

    Sections

  • msidle.dll
    .dll windows:10 windows x64 arch:x64

    14fd2ad264e565ddd6fbeaa5eeae6e57


    Headers

    Imports

    Sections

  • msidntld.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • panmap.dll
    .dll windows:10 windows x64 arch:x64

    e9dbf5df0a9e862645294faf11ef4307


    Headers

    Imports

    Exports

    Sections

  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    f8282f99f39314d8a05a0ff650027272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prflbmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • provdiagnostics.dll
    .dll windows:10 windows x64 arch:x64

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • wiatrace.dll
    .dll windows:10 windows x64 arch:x64

    7146ee63c835f34bc9729fe5ed9f8dbe


    Headers

    Imports

    Exports

    Sections