General

  • Target

    e26ba05060518baeeb3775228cf9c12959e9ee3a25bd115e09b382b116d647cc.zip

  • Size

    2.1MB

  • MD5

    b72c6546dd33a14a651fe7cad70bd09d

  • SHA1

    645635b92670c100e810d8201645aef445204a05

  • SHA256

    e26ba05060518baeeb3775228cf9c12959e9ee3a25bd115e09b382b116d647cc

  • SHA512

    e7fb941705aafd4ce894ae83dd5e3e9e1c0863fbd3227700b28695ceb260ee25f0516ef2169ac725a9434c31a901181b2c01f378df8966ced4c023fb4e916109

  • SSDEEP

    49152:5jW0xxRYrp7KVw469Y0CdS9tbezaSjp2BW79BfO+MBr96AD4:5qG7S2C99tbezP92BWaZhB4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • e26ba05060518baeeb3775228cf9c12959e9ee3a25bd115e09b382b116d647cc.zip
    .zip
  • 71/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/KBDURDU.DLL
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 71/NSM.LIC
  • 71/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3a11e97784eee8956c234c3177a14837


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/SecurityAndMaintenance_Error.png
    .png
  • 71/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • 71/client32.ini
  • 71/kanji_1.uce
  • 71/kbd101a.DLL
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 71/kbd101b.DLL
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 71/kbd101c.DLL
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 71/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/nskbfltr.inf
  • 71/nsm_vpro.ini
  • 71/pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 71/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • 71/rendezvousSession.tlb
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections