Overview

overview

10

Static

static

7

Setup.exe

windows7_x64

10

Setup.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pass_1234_Setup.rar

  • Size

    5.3MB

  • MD5

    a5d5cbd6d221b528f236857dd6dad09f

  • SHA1

    31881992e6c5cabb710bc131de947f86c9f5d87e

  • SHA256

    3b93d09292f2f38a0405954ff5c9a4697a2425fbcfad55d61782d4d055b2d9f7

  • SHA512

    df3412ae30fce4bf0402fc16a95442535febbc5fce94c09c45c5c3819b10d135b80b31362f9b5d1d62d7f6746df8e590dffbb7fcaa0bf3a2bf914da3ee013e53

  • SSDEEP

    98304:7utfYltEbV+UOSTezxmXJsliNj1ZSesTX+CyQhM+BuVRTen+X:7uSlyHxTIxGBRnSnT+BOJBu3TlX

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • Pass_1234_Setup.rar
    .rar

    Password: 1234

  • Locals/am.pak
  • Locals/ar.pak
  • Locals/fi.pak
  • Locals/fil.pak
  • Locals/fr.pak
  • Locals/he.pak
  • Locals/hr.pak
  • Locals/hu.pak
  • Locals/id.pak
  • Locals/lt.pak
  • Locals/lv.pak
  • Setup.exe
    .exe windows x86

    Password: 1234

    e40757489f9bf9a0a0c1e0329f45b1df


    Code Sign

    Headers

    Imports

    Sections

  • fonts/Alakob.ttf
  • fonts/AlaskanNights.ttf
  • fonts/Arggotsc.ttf
  • fonts/Army Condensed.ttf
  • fonts/Army Expanded.ttf
  • fonts/Army Thin.ttf
  • fonts/Army Wide.ttf
  • fonts/Army.ttf
  • fonts/BELL.TTF
  • fonts/BELLB.TTF
  • fonts/BELLI.TTF
  • fonts/BOD_BI.TTF
  • fonts/BOD_BLAI.TTF
  • fonts/BOD_I.TTF
  • fonts/BOD_PSTC.TTF
  • fonts/CALISTB.TTF
  • fonts/CALISTBI.TTF
  • fonts/CENTAUR.TTF
  • fonts/Cabana-Regular.ttf
  • fonts/baby_csp.ttf
  • fonts/black.ttf
  • fonts/bold_0.ttf
  • fonts/browa.ttf
  • fonts/browau.ttf
  • fonts/browauz.ttf
  • fonts/browaz.ttf
  • fonts/deathrattlebb_reg.ttf