General

  • Target
    1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460.bin
  • Size 16.1MB
  • Sample260724-wb4feahg59
  • SHA256 1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460.bin
    .zip 16.1MB
  • AccessibleMarshal.dll
    .dll 917KB
  • freebl3.dll
    .dll 917KB
  • gkcodecs.dll
    .dll 917KB
  • lgpllibs.dll
    .dll 918KB
  • libEGL.dll
    .dll 2.9MB
  • libGLESv2.dll
    .dll 2.9MB
  • mozavcodec.dll
    .dll 1.1MB
  • mozavutil.dll
    .dll 2.9MB
  • mozglue.dll
    .dll 831KB
  • mozglue.manifest
    .xml 240B
  • mozinference.dll
    .dll 917KB
  • mozwer.dll
    .dll 917KB
  • msvcp140.dll
    .dll 540KB
  • notificationserver.dll
    .dll 818KB
  • nss3.dll
    .dll 918KB
  • nssutil3.dll
    .dll 6.2MB
  • plugin-container.exe
    .exe 141KB
  • softokn3.dll
    .dll 918KB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB
  • wmfclearkey.dll
    .dll 871KB
  • xul.dll
    .dll 8.2MB

1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460.bin

  • SHA256 1cec90906b40fa7e29f0cd531d3bbcfc19f6e03fd99b5c41b5dbce8270652460
  • MD5 SHA1 SHA512 SSDEEP TLSH