General

  • Target
    packagecache_x64_data.zip
  • Size 7.3MB
  • Sample261031-1be52af19l
  • SHA256 2545ecfee03220ed3840057516aa29792d418581bf0ac3d03a8e82e18c958e9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • packagecache_x64_data.zip
    .zip 7.3MB
  • borlndmm.dll
    .dll 78.0MB
  • packagecache_x64_data.exe
    .exe 3.4MB

packagecache_x64_data.zip

  • SHA256 2545ecfee03220ed3840057516aa29792d418581bf0ac3d03a8e82e18c958e9f
  • MD5 SHA1 SHA512 SSDEEP TLSH