Software_AllSoftClub[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Software_AllSoftClub.zip
Size

12.1MB
MD5

3856c9fdc9349b7737ea1185ef08c403
SHA1

827f315240905c76de29a7a6324b02d3df3ab612
SHA256

0d07012861f3ab46ac1bd3bfad1b28861e799d49a585e48637422820db65bc96
SHA512

55a1b034a38fa16da2af2f2c8b98b56eb0f032394d70f14f5bb4d70666e2ead44f7a92391a91d831e8c81bf15c1b3a975433754cfb321e9e371e47ee40b6b9f4
SSDEEP

393216:1FWay6HJHdnjqOtU1R5IEQT2NYMre6UgctGvfLMKA2:1FWMTjFtUuSSMrejgBH

Score

N/A

Malware Config

Signatures

Files

Software_AllSoftClub.zip
.zip

Password: 2023
Software/NiniteAutoInstaller13.0.17.exe
.exe windows x86

Password: 2023

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Software/libGLESv2.dll
Software/updater.ini