CamRingManager[.]zip

General

Target
CamRingManager.zip
Size 2.2MB
Sample260720-gzfa6abs61
SHA256 bb9c28b89b282cbc9db130ea74f66f2e85ce1df8f6c630ff393d57bae994821c
MD5 1f40e09dbee788051d57cb1202076653
SHA1 6e287a358354286cfdf7f39e14a1fad42d4fd5fb
SHA512 f7336448fa6c1612fc2bb3a621a2bebd8d346fdffcb8bf00a97458fe96ce76dfce9521156f7ad1ab25396840733a15495bfe5e4bf79a497b828b051d6f54ae85
SSDEEP 49152:/U/hdhqaeqyFsqtdPrsmWtB5Gon1S3MQ9KkoYRzR3m0WOP4uk:/OdhXGFsuxWX5hnM9NRzRLUuk
TLSH
T1DEB533533D4091663ABA634632CFFDF0818159BE6AC154C4A0851E0AF2A52EBDF3DB97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cam Manager.exe

File Explorer

CamRingManager.zip

.zip 2.2MB
Cam Manager.exe

.exe 2.9MB

CamRingManager.zip

SHA256 bb9c28b89b282cbc9db130ea74f66f2e85ce1df8f6c630ff393d57bae994821c
MD5 1f40e09dbee788051d57cb1202076653
SHA1 6e287a358354286cfdf7f39e14a1fad42d4fd5fb
SHA512 f7336448fa6c1612fc2bb3a621a2bebd8d346fdffcb8bf00a97458fe96ce76dfce9521156f7ad1ab25396840733a15495bfe5e4bf79a497b828b051d6f54ae85
SSDEEP 49152:/U/hdhqaeqyFsqtdPrsmWtB5Gon1S3MQ9KkoYRzR3m0WOP4uk:/OdhXGFsuxWX5hnM9NRzRLUuk
TLSH
T1DEB533533D4091663ABA634632CFFDF0818159BE6AC154C4A0851E0AF2A52EBDF3DB97
MD5 SHA1 SHA512 SSDEEP TLSH

Cam Manager.exe

SHA256 9196621dda4ad4d1a79d8da12c86fa20f456964ff8f9e0a210144f09bca117b3
MD5 0a645b30a67618deac2c7ee001e56902
SHA1 81c676db8d33aa62567798329dd4695071a82d48
SHA512 f4916c09b9b72d68d59e3b826b6e2686f5623fa90af90682fcd6e9f67de8ed85f169ba713c1937af30803435453321341abfdfe698f3ebc82167478fdcd6dedf
SSDEEP 49152:74BhBNe6WJNEx+Irwtl9/BT0WnOuoxmsfQFes1F4wp882yyA3Agu:uB9WJN1IrwppTrnAxmQQay2lLgu
TLSH
T196E5E07771A0C478D1AF46746DC6D2B15222BD201E791A8B33E11B0B2FB7A902B7D35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

41900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\xingdiannaobeifeng\检测软件\bin\上位机软件.pdb

Name

.text

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.enigma1

Size

2.6MB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma2

Size

256KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

CamRingManager.zip

Cam Manager.exe

generic