General

  • Target

    a761508511850cd6e28bce353a5a1f02a1a739b36a3744dcf95b4082f76b2cd3.zip

  • Size

    5.2MB

  • MD5

    a846b7c7491eb94103f225df0475add2

  • SHA1

    74b4015a4fd63d614ff7ec921bfcc7233cdc6921

  • SHA256

    a761508511850cd6e28bce353a5a1f02a1a739b36a3744dcf95b4082f76b2cd3

  • SHA512

    148103e159590c2f23c845ef12eb67cf79134977dc56ab0e612e4eb25de46c5c01ad5616f4c96eb0a4f1ffac7fba21b6d7ad008f96f8c3a55dafafc121501e9c

  • SSDEEP

    98304:yYsAKYznmQxo7TpUjk6TvTnbdOpL5GwN8Yckaz1xljkaUzbQMOVxQJiT08:rztxoqjEVKbz1xlEbWaij

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a761508511850cd6e28bce353a5a1f02a1a739b36a3744dcf95b4082f76b2cd3.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    12502266fb3759e2dc267188b1b8003e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • htctl32.dll
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • onedrive.lnk
    .lnk
  • pcicapi.DLL
    .dll windows:5 windows x86 arch:x86

    c09dcd07c8e93b972e6530c73f8ec4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections