Malicious
bb3afa1cec96f946cc5d5d44cc5689cc
ZIP Archive | MD5: bb3afa1cec96f946cc5d5d44cc5689cc | Size: 1.07 MB | application/zip
ZIP Archive
MD5: bb3afa1cec96f946cc5d5d44cc5689cc
Size: 1.07 MB
application/zip
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | bb3afa1cec96f946cc5d5d44cc5689cc
|
| Sha1 | 127894d6a4a12b895d25aa5caa159b055eab9fad
|
| Sha256 | 752deb8bb13033c153487d3f18e4f5ecdcb0926fca52d2775495673dc02e493a
|
| Sha384 | 887522039ed089b0117fd82904a2d3617832eb43b45d145828871b0e494ee15106f18722386d17df351799e810c1a392
|
| Sha512 | b702ea53ddbd559f981aff1f26f8714a432b8c6439e3ff7c2eea3d9d9ea36d5f4baba22a8af5a2d59ad6a57743c240d9f6bed1967a100019d5b903bcdbcb9f8d
|
| SSDeep | 12288:qFBMiMhn1+R6iCW6pZ5vECVqObN/go64z+1gig/Aqk+lcOyZ:8rMx1+R0W6LZXhN/go6f1gPlWOa
|
| TLSH | 3135230AAC186FDAF425A631DDF5ECD3E12DCB71734541BFD121AB242AB390A0F57A41
|
File Structure
bb3afa1cec96f946cc5d5d44cc5689cc
Malicious
emjio.tmp
[Authenticode]_9e5aaef1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.tls
.00cfg
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_8fdc4619.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.didat
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
UpdateDriverSdk.dll
Malicious
[Authenticode]_6dc9e549.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_ab80c80e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Artefacts
|
Name0 | Value |
|---|---|
| PE Layout | MemoryMapped (process dump suspected) |
bb3afa1cec96f946cc5d5d44cc5689cc (1.07 MB)
File Structure
bb3afa1cec96f946cc5d5d44cc5689cc
Malicious
emjio.tmp
[Authenticode]_9e5aaef1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.tls
.00cfg
_RDATA
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_8fdc4619.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.didat
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
UpdateDriverSdk.dll
Malicious
[Authenticode]_6dc9e549.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_ab80c80e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| PE Layout | MemoryMapped (process dump suspected) |
bb3afa1cec96f946cc5d5d44cc5689cc > UpdateDriverSdk.dll |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.