General

  • Target

    msg.zip

  • Size

    2.9MB

  • MD5

    2160c50a4cb75d7dede8a9a67e2ee0a1

  • SHA1

    28482693a2bff96f9eff21002664633fb594bc1d

  • SHA256

    d2e37391e8311473cb09cad08ee52af7717eb221e57e3d1db64c12640871d57b

  • SHA512

    0485f6fae741b997bbfc3eeb2f2de5996afa0d9aa29748d97a9ad3fe2dd1137c09bc302bbe4bf2c966112b821698bc6de5ecbbd411ceb6d0ad3600f633a3890b

  • SSDEEP

    49152:mINfCr5pRpKsvhec4wklsL3HYZucx0ftkaTc2e1KTNLAFPONKQxR4vMP+J2/Y8lE:3NaVpphec4wk2oocWtfU1KxLLKca3aYJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • msg.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    a6ab0ac73d733ac12db0454e9a7326f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KBDTAM99.DLL
    .dll windows:10 windows x64 arch:x64


    Headers

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    65cee6e8444a20647b800e009130d04c


    Headers

    Imports

    Exports

    Sections

  • Temp/Storm.dll
    .dll windows:4 windows x86 arch:x86

    9668480708dbc63b63913082d88aedcb


    Headers

    Imports

    Exports

    Sections

  • Temp/configs
  • Temp/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TsUsbRedirectionGroupPolicyExtension.dll
    .dll windows:10 windows x64 arch:x64

    54be2b7c7bffa0cee4af2cdb42cf9085


    Headers

    Imports

    Exports

    Sections

  • WiaExtensionHost64.dll
    .dll windows:10 windows x64 arch:x64

    39f7abf43a82831d6b4792c9ce9d440f


    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • comcat.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5c317b4785c1c3ce395f95788fb0f892


    Headers

    Imports

    Exports

    Sections

  • getuname.dll
    .dll windows:10 windows x64 arch:x64

    b5f02961939c3c6edf46e7379484f547


    Headers

    Imports

    Exports

    Sections

  • ifsutilx.dll
    .dll windows:10 windows x64 arch:x64

    f0120248cc8015539d8aaf42f8d64a47


    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssp-0.dll
    .dll windows:4 windows x64 arch:x64

    550703e32944da81749eeb979a022099


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    fea7be972a0bb7dd20cc26160803dae6


    Headers

    Imports

    Exports

    Sections

  • mprext.dll
    .dll windows:10 windows x64 arch:x64

    8c4eb7a549c77fac0467b83cebc5d650


    Headers

    Imports

    Exports

    Sections

  • msidle.dll
    .dll windows:10 windows x64 arch:x64

    14fd2ad264e565ddd6fbeaa5eeae6e57


    Headers

    Imports

    Sections

  • msidntld.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • panmap.dll
    .dll windows:10 windows x64 arch:x64

    e9dbf5df0a9e862645294faf11ef4307


    Headers

    Imports

    Exports

    Sections

  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    f8282f99f39314d8a05a0ff650027272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prflbmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • provdiagnostics.dll
    .dll windows:10 windows x64 arch:x64

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • wiatrace.dll
    .dll windows:10 windows x64 arch:x64

    7146ee63c835f34bc9729fe5ed9f8dbe


    Headers

    Imports

    Exports

    Sections