General

  • Target

    CompleteSetup_1234_Activated_File.rar

  • Size

    13.8MB

  • MD5

    292c13e8a7c59b86fdfac092696d1682

  • SHA1

    6b049d7f413e5e1a5d127e78ec7ed317c0418319

  • SHA256

    ca9b503f28dc11ef3a25decc2e91845774ac6dd1deee166d73028b32e9d8dc4a

  • SHA512

    be1616289a8d59b5efd5129215910b22fa8bec5c609a82feb23da48fd1b7156a37b3ff7a27f687255cf51c55b5eb992bc92ff7573e478a52032a9b4c730598b1

  • SSDEEP

    393216:eD8p4Ad63AyvYkNPPwQOr34lbUcnECcLkth:+8iDQyvY4wj34lbQkz

Score
N/A

Malware Config

Signatures

Files

  • CompleteSetup_1234_Activated_File.rar
    .rar

    Password: 1234

  • Setup.exe
    .exe windows x86

    Password: 1234

    9f2c76418357be5cdc291649da90bd66


    Code Sign

    Headers

    Imports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows x64

    Password: 1234


    Code Sign

    Headers

    Exports

    Sections

  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • platforms/qwindows.dll
    .dll windows x64

    Password: 1234

    033d09d773d3e334541b49e065bca8a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • resources/app.asar
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-1.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-10.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-10_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-10_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-1_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-1_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-2.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-2_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-2_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-3.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-3_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-3_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-4.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-4_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-4_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-5.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-5_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-5_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-6.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-6_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-6_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-7.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-7_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-7_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-8.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-8_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-8_white.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-9.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-9_black.ico
  • resources/app.asar.unpacked/build/assets/images/menubar icons/win32/lock-9_white.ico
  • resources/relays.json
  • resources/talpid_openvpn_plugin.dll
    .dll windows x64

    Password: 1234

    c5236841ee8eecb9a2f11975c9a23816


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/windns.dll
    .dll windows x64

    Password: 1234

    9b617ea0db0b41a6cab86a4fd62d15b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/winfw.dll
    .dll windows x64

    Password: 1234

    b3c179a81944b80f8ae07c1a1c70198a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/winnet.dll
    .dll windows x64

    Password: 1234

    651a29b435f81b0e8ad2eacb78d8bf1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/wintun.dll
    .dll windows x64

    Password: 1234

    fb80e633863ed8c533980106499de45f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcomp140.dll
    .dll windows x64

    b0dceb96b51d2648c4e665c9ec09b163


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections