Resubmissions

08-07-2022 06:59

220708-hsbvtsgcf2 10

08-07-2022 06:44

220708-hhtmwsdffl 10

General

  • Target

    Open_with_Pass_1234.rar

  • Size

    6.0MB

  • MD5

    43c600be3be59b952884896bcb436137

  • SHA1

    46aedea28061f1f70006631ec1623bf1c4a1e0f2

  • SHA256

    ac213f59b8e531996dd838fa8b00ee83d06f6f9651282b5a21ed534fe956706e

  • SHA512

    05f1015252d14cf0881467b2d63fc7302ea0c97d7606b6f6267acd8d10775bf5b0c1474c053bb8cada4495cb4005c9abbba95304c7c8aeb894d042cf38000a1a

  • SSDEEP

    98304:yPL9emEPpdNgaTqqAYqXMW3Xi3t+IQI5XvyC7oKIrJrKNSxgjbtXAB5qS4WVxBXu:mxemCdNgaT83c6GsIxaVu0ebtiqS4W85

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Open_with_Pass_1234.rar
    .rar

    Password: 1234

  • Locals/fi.pak
  • Locals/fil.pak
  • Locals/fr.pak
  • Locals/hr.pak
  • Locals/hu.pak
  • Locals/id.pak
  • Locals/lt.pak
  • Locals/lv.pak
  • Setup.exe
    .exe windows x86

    Password: 1234

    c14ef0cd58d298cc99d4494eae51f540


    Code Sign

    Headers

    Imports

    Sections

  • langs/Arabic.ini
  • langs/Armenian.ini
  • langs/Belarusian.ini
  • langs/Bulgarian.ini
  • langs/Catalan.ini
  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/Dutch.ini
  • langs/English.ini
  • langs/Farsi.ini
  • langs/Finnish.ini
  • langs/French.ini
  • langs/German.ini
  • langs/Greek.ini
  • langs/Hebrew.ini
  • langs/Hindi.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Italian.ini
  • langs/Italian2.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/Polish.ini
  • langs/Portuguese.ini
  • langs/PortugueseBR.ini
  • langs/Romanian.ini
  • langs/Russian.ini
  • langs/Serbian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Slovenian.ini
  • langs/Spanish.ini
  • langs/Swedish.ini
  • langs/Tagalog.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Turkish.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini