General

  • Target

    Passwords 123 Setup Here.rar

  • Size

    5.3MB

  • MD5

    324fa440120c4bf9a7c4fcc956f5bcac

  • SHA1

    fdc5b86648e001bd4c5b5fb14d2719e61ce7772e

  • SHA256

    4d8915f0725759ef33eb0650a94b716d4f37090e23664f66665d216aed5423bd

  • SHA512

    414f341eb1d694b6e590b5894ec3c8e6e4d037300b210192b4ca0b0e2e2d724376044486a2cd445d9208cdf4623120876424b83676c203311c3e0c5bdd14a64c

  • SSDEEP

    98304:61UtwSrE0RZf0jK0GueLoHYUqcHC/2u6kEy+eePZPwmz/mxEXFW50ktqSEMHprmF:61Ug0Rd/9LWYUi/21ypePZPwmz6AW5/o

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Passwords 123 Setup Here.rar
    .rar

    Password: 123

  • Pass 123.txt
  • Setup.exe
    .exe windows x86

    Password: 123

    e40757489f9bf9a0a0c1e0329f45b1df


    Code Sign

    Headers

    Imports

    Sections

  • langs/Arabic.ini
  • langs/Armenian.ini
  • langs/Belarusian.ini
  • langs/Bulgarian.ini
  • langs/Catalan.ini
  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/Dutch.ini
  • langs/English.ini
  • langs/Farsi.ini
  • langs/Finnish.ini
  • langs/French.ini
  • langs/German.ini
  • langs/Greek.ini
  • langs/Hebrew.ini
  • langs/Hindi.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Italian.ini
  • langs/Italian2.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/Polish.ini
  • langs/Portuguese.ini
  • langs/PortugueseBR.ini
  • langs/Romanian.ini
  • langs/Russian.ini
  • langs/Serbian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Slovenian.ini
  • langs/Spanish.ini
  • langs/Swedish.ini
  • langs/Tagalog.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Turkish.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini