General

  • Target

    Wia64.zip

  • Size

    3.6MB

  • MD5

    108b891e5a2447554f4347adada2fb79

  • SHA1

    735e6c7206d7e5b74b28fa759d09ce83ccd4d969

  • SHA256

    d97a186d7a7d86fd4266226ce416dd67d6dc618662fc300715156d88c8c6c1ea

  • SHA512

    a01e30a49c3a0fc69b3d08a0c5baecdcc4e3a8b85aba6fc142f2f6c24b8eed0aab4bbddf913c84d130aca090d6a7aae571550b657294f9058fc24f8272dff0f1

  • SSDEEP

    98304:TNaVhphec4QkOoocOtfU1KxLLSuCH9bLTWUq3q+yFYsl:TN+hjec4tOJPtfYKxPYjWvdW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • Wia64.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    a6ab0ac73d733ac12db0454e9a7326f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KBDTAM99.DLL
    .dll windows:10 windows x64 arch:x64


    Headers

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    65cee6e8444a20647b800e009130d04c


    Headers

    Imports

    Exports

    Sections

  • TsUsbRedirectionGroupPolicyExtension.dll
    .dll windows:10 windows x64 arch:x64

    54be2b7c7bffa0cee4af2cdb42cf9085


    Headers

    Imports

    Exports

    Sections

  • WiaExtensionHost64.dll
    .dll windows:10 windows x64 arch:x64

    39f7abf43a82831d6b4792c9ce9d440f


    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • comcat.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5c317b4785c1c3ce395f95788fb0f892


    Headers

    Imports

    Exports

    Sections

  • getuname.dll
    .dll windows:10 windows x64 arch:x64

    b5f02961939c3c6edf46e7379484f547


    Headers

    Imports

    Exports

    Sections

  • ifsutilx.dll
    .dll windows:10 windows x64 arch:x64

    f0120248cc8015539d8aaf42f8d64a47


    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssp-0.dll
    .dll windows:4 windows x64 arch:x64

    550703e32944da81749eeb979a022099


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    fea7be972a0bb7dd20cc26160803dae6


    Headers

    Imports

    Exports

    Sections

  • mprext.dll
    .dll windows:10 windows x64 arch:x64

    8c4eb7a549c77fac0467b83cebc5d650


    Headers

    Imports

    Exports

    Sections

  • msidle.dll
    .dll windows:10 windows x64 arch:x64

    14fd2ad264e565ddd6fbeaa5eeae6e57


    Headers

    Imports

    Sections

  • msidntld.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • panmap.dll
    .dll windows:10 windows x64 arch:x64

    e9dbf5df0a9e862645294faf11ef4307


    Headers

    Imports

    Exports

    Sections

  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    f8282f99f39314d8a05a0ff650027272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prflbmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • provdiagnostics.dll
    .dll windows:10 windows x64 arch:x64

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Sections

  • redist/miles/Mp3dec.asi
    .dll windows:4 windows x86 arch:x86

    113244029ceda204dda9cd578f66b019


    Code Sign

    Headers

    Imports

    Sections

  • redist/miles/Mssdolby.m3d
    .dll windows:4 windows x86 arch:x86

    6acf1151433f8344d1ac4481b08f7711


    Code Sign

    Headers

    Imports

    Sections

  • redist/miles/Msseax2.m3d
    .dll windows:4 windows x86 arch:x86

    ddb5c0adb544de157684e8731c9efa87


    Code Sign

    Headers

    Imports

    Sections

  • redist/miles/Mssfast.m3d
    .dll windows:4 windows x86 arch:x86

    0e23d46c2d8f9de9174114dcf4997194


    Code Sign

    Headers

    Imports

    Sections

  • redist/miles/Reverb3.flt
    .dll windows:4 windows x86 arch:x86

    03defa7ffc17825c777c64db523e9c6d


    Code Sign

    Headers

    Imports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • setup/6C204DD01F5DA7EAs
  • setup/Storm.dll
    .dll windows:4 windows x86 arch:x86

    9668480708dbc63b63913082d88aedcb


    Headers

    Imports

    Exports

    Sections

  • setup/configs
  • setup/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/shortcuts-default.json
  • wiatrace.dll
    .dll windows:10 windows x64 arch:x64

    7146ee63c835f34bc9729fe5ed9f8dbe


    Headers

    Imports

    Exports

    Sections