General

  • Target
    WinRAR.zip
  • Size 5.1MB
  • Sample261102-cxdbka115p
  • SHA256 44d2b20e32183e91d37e6a7ff5b21287d4453fccc1f4c00ffa9d909df76b70bb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • WinRAR.zip
    .zip 5.1MB
  • Fling-Standalone31.559.6032.exe
    .exe 3.4MB
  • borlndmm.dll
    .dll 77.5MB

WinRAR.zip

  • SHA256 44d2b20e32183e91d37e6a7ff5b21287d4453fccc1f4c00ffa9d909df76b70bb
  • MD5 SHA1 SHA512 SSDEEP TLSH