General

  • Target

    7eb7a0ed01e80adb89b192b7876cafda055c00c1c5ce94d1a2f2f6f356643a32.zip

  • Size

    2.1MB

  • MD5

    9adea3c9de85eb17530fec3431edb0a8

  • SHA1

    63cb4ee5a22ee310574f72bf28748608e57a7ee3

  • SHA256

    7eb7a0ed01e80adb89b192b7876cafda055c00c1c5ce94d1a2f2f6f356643a32

  • SHA512

    3aa8d9d04ed0094e3109de78a57005cc23d1a2b26dfeee5c00998396ab55696672add434bef79f8bd059fe773bda5abd7e8490f3a5c6b231eca7c302232cbae8

  • SSDEEP

    49152:AjW0xxpYrp7FVhEBNO9GAeuAGW4XpY2F8cMUCFQOJK02Wx8mWLawS6K:AqGHShENOzeuAGrXnF6uol564oK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 7eb7a0ed01e80adb89b192b7876cafda055c00c1c5ce94d1a2f2f6f356643a32.zip
    .zip
  • tzz1/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/DMAppsRes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/ETWCoreUIComponentsResources.dll
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • tzz1/HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/MapControlStringsRes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/Microsoft-WindowsPhone-SEManagementProvider.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/NSM.LIC
  • tzz1/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    ef1f3ab1ce0aecabb43db96a36b33ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/PhoneServiceRes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/PhoneutilRes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/bridgeres.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/client32.exe
    .exe windows:4 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • tzz1/client32.ini
  • tzz1/comres.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/dmdskres.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/dmdskres2.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/imageres.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/imagesp1.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/iologmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/lltdres.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/moricons.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/msprivs.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/msxml3r.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/msxml6r.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/nskbfltr.inf
  • tzz1/nsm_vpro.ini
  • tzz1/pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tzz1/qedwipes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • tzz1/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections