General

  • Target

    64de0f0d8cc7c92bc996636b0b61e92cfa4fb0dbdddc749694d4a7569d768549.zip

  • Size

    5.1MB

  • MD5

    75102696a032679d11b0b597bfa7900f

  • SHA1

    b13e08c72786d38e619303608abc0347b52de945

  • SHA256

    64de0f0d8cc7c92bc996636b0b61e92cfa4fb0dbdddc749694d4a7569d768549

  • SHA512

    26324ffc6a4f1f653d279786790ee0a0f2ebca518a6118caec253018f9c526c0676a25886c7c34f56e6b812e9dceb486d1561ce02431a5181319c120fb3a307b

  • SSDEEP

    98304:NKs9oEaOcS6TgIRCCDQJKzNcjdPh5Wdv3nhpoZWCrSqd4gvNz/f7tyBpgTMcDYsZ:1hlTCgIR1EMajdpgdPnkZWCdHxztdr

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 64de0f0d8cc7c92bc996636b0b61e92cfa4fb0dbdddc749694d4a7569d768549.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    cfc186af89cec277c7bb366cb372731e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • htctl32.dll
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • office.lnk
    .lnk
  • pcicapi.DLL
    .dll windows:5 windows x86 arch:x86

    c09dcd07c8e93b972e6530c73f8ec4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections