General

  • Target
    vomit_sideloader.zip
  • Size 3.1MB
  • Sample260622-e7xjasgz3n
  • SHA256 a51146991c6ae86127c171a45bc78988f9893cbf40a0ad81fe1480121d38bfe1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • vomit_sideloader.zip
    .zip 3.1MB
  • VCRUNTIME140.dll
    .dll 83KB
  • VCRUNTIME140_1.dll
    .dll 48KB
  • glib-2.0.dll
    .dll 1.2MB
  • gmodule-2.0.dll
    .dll 29KB
  • gobject-2.0.dll
    .dll 293KB
  • intl.dll
    .dll 109KB
  • pcre.dll
    .dll 402KB
  • vmtools.dll
    .dll 867KB
  • vomit.exe
    .exe 108KB

vomit_sideloader.zip

  • SHA256 a51146991c6ae86127c171a45bc78988f9893cbf40a0ad81fe1480121d38bfe1
  • MD5 SHA1 SHA512 SSDEEP TLSH