General

  • Target

    Installer__Pass_1234.rar

  • Size

    6.0MB

  • MD5

    5e3ce385693dcc01f7105cb69f1e4080

  • SHA1

    c119534b1e0c53bc84c15ec216d42eb8fc0ebdba

  • SHA256

    6dfd5a3c0b4ee1678a45998424308b1e606809a28970ae17d14f36a3277e7a93

  • SHA512

    3eb78663adbf7b1ca95fced952cd9e8d8d5e5cc419abe9b6eab7e05adc1586d92aa2a971f1171b173a080ccc3b47017440bfb433a3a51bdd79cb01e374048158

  • SSDEEP

    98304:amYV4k3ZW/sKnepeYgvkl6Wjb4F2qOBjLcqLdVIejt8fq7GYFNDsFpcS6iYFm:LYVRAEKep4AbIF2qIL7Vt8VYXsgS7Um

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Installer__Pass_1234.rar
    .rar

    Password: 1234

  • Locals/am.pak
  • Locals/ar.pak
  • Locals/fi.pak
  • Locals/fil.pak
  • Locals/fr.pak
  • Locals/gu.pak
  • Locals/he.pak
  • Locals/hi.pak
  • Locals/hr.pak
  • Locals/hu.pak
  • Locals/id.pak
  • Locals/lt.pak
  • Locals/lv.pak
  • Setup.exe
    .exe windows x86

    Password: 1234

    e40757489f9bf9a0a0c1e0329f45b1df


    Code Sign

    Headers

    Imports

    Sections

  • fonts/8514sys.fon
  • fonts/dosapp.fon
  • fonts/smalle.fon
  • fonts/symbol.ttf
  • fonts/trebucbd.ttf
  • fonts/trebucbi.ttf
  • fonts/verdana.ttf
  • fonts/verdanab.ttf
  • fonts/verdanai.ttf
  • fonts/verdanaz.ttf
  • fonts/vgaoem.fon
  • fonts/webdings.ttf
  • fonts/wingding.ttf