General

  • Target

    temp.zip

  • Size

    1.8MB

  • MD5

    c8971dd40c1401887a2df4410e888774

  • SHA1

    1af1c487ca21a123533a3b4281394287e524c64f

  • SHA256

    33d0bc76fa1c09fe48e29f19ffd56325f1b435c4eac6c81ae7bd2ae26ab7444e

  • SHA512

    ee01eea746b90ca92776b667be43d1c8976afac9c40eaf5d3d915a75b6d3bd78befc4ed121c3d05c69e17c1667086b190d792ed37c347a93bd5068d8316fe5c0

  • SSDEEP

    49152:Ooc5yTO+WoipAv+1VGgFDibQPZ27miMweVL16h1ExR:OocSiAv+egYbvQVL16bwR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • temp.zip
    .zip
  • archivo.exe
    .exe windows:6 windows x64 arch:x64

    1915c341cd3eff1c08f388f0950f2665


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cervix.msg
  • mozglue.dll
    .dll windows:6 windows x64 arch:x64

    3fe26c2efd0cc6aa7c5638ced477949f


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2d14223d6f13e6499c10a49c1d5a1075


    Headers

    Imports

    Exports

    Sections

  • paillette.dmg
  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Headers

    Imports

    Exports

    Sections