General

  • Target

    FileSetup.rar

  • Size

    8.7MB

  • MD5

    831fe523a78607a4c2a3974a7ef1f353

  • SHA1

    487e13151602329ff0dd42ca9263812774b4cc83

  • SHA256

    3235b41880fdf5177f9edbf583cc94a519d04676865fc40f001695eeb936c59d

  • SHA512

    71a98931c5d2b72fe6cf4de0acabd274b9c4ef22b26f51fc038c03fbfbfb8127507bf670754ab2704754c163bb8b590dce3e91d506343f53f4473229133883a5

  • SSDEEP

    196608:fVRBvNuYQ7vBMkpYvbdEb2WQIYt22UdsZ0tIYuIgxKK94djl89:ruYOB3pYvJE7QRt22W6bCjl4

Score
N/A

Malware Config

Signatures

Files

  • FileSetup.rar
    .rar

    Password: 55551

  • AppSetup.exe
    .exe windows x86

    Password: 55551

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Globalization/Time Zone/timezoneMapping.xml
  • Globalization/Time Zone/timezones.xml
  • Resource files/ActiveXInstallService.admx
  • Resource files/AddRemovePrograms.admx
  • Resource files/AppCompat.admx
  • Resource files/AppXRuntime.admx
    .xml
  • Resource files/AppxPackageManager.admx
  • Resource files/AttachmentManager.admx
  • Resource files/AuditSettings.admx
    .xml
  • Resource files/AutoPlay.admx
  • Resource files/Biometrics.admx
  • Resource files/CEIPEnable.admx
  • Resource files/COM.admx
  • Resource files/CipherSuiteOrder.admx
  • Resource files/ControlPanel.admx
  • Resource files/Cpls.admx
  • Resource files/CredUI.admx
  • Resource files/CredentialProviders.admx
  • Resource files/CtrlAltDel.admx
  • Resource files/DCOM.admx
  • Resource files/DFS.admx
  • Resource files/DWM.admx
  • Resource files/DeviceCompat.admx
  • Resource files/DeviceSetup.admx
  • Resource files/DigitalLocker.admx
  • Resource files/DiskDiagnostic.admx
  • Resource files/DiskNVCache.admx
  • Resource files/DiskQuota.admx
  • Resource files/DistributedLinkTracking.admx
  • Resource files/EAIME.admx
  • Resource files/EarlyLaunchAM.admx
  • Resource files/EdgeUI.admx
  • Resource files/EncryptFilesonMove.admx
  • Resource files/EventForwarding.admx
    .xml
  • Resource files/EventViewer.admx
  • Resource files/Explorer.admx
  • Resource files/ExternalBoot.admx
    .xml
  • Resource files/FileHistory.admx
  • Resource files/FileRecovery.admx
  • Resource files/FileRevocation.admx
  • Resource files/FileServerVSSProvider.admx
  • Resource files/FileSys.admx
    .xml
  • Resource files/FolderRedirection.admx
  • Resource files/FramePanes.admx
  • Resource files/GameExplorer.admx
  • Resource files/GroupPolicy-Server.admx
  • Resource files/Help.admx
  • Resource files/HelpAndSupport.admx
  • Resource files/IIS.admx
  • Resource files/InkWatson.admx
  • Resource files/Kerberos.admx
  • Resource files/LanmanServer.admx
  • Resource files/LeakDiagnostic.admx
  • Resource files/LinkLayerTopologyDiscovery.admx
  • Resource files/LocationProviderAdm.admx
  • Resource files/MMC.admx
  • Resource files/MMCSnapIns2.admx
  • Resource files/MSDT.admx
  • Resource files/MediaCenter.admx
  • Resource files/MobilePCMobilityCenter.admx
  • Resource files/MobilePCPresentationSettings.admx
  • Resource files/Msi-FileRecovery.admx
  • Resource files/NAPXPQec.admx
  • Resource files/NCSI.admx
  • Resource files/NetworkIsolation.admx
  • Resource files/NetworkProjection.admx
  • Resource files/P2P-pnrp.admx
  • Resource files/ParentalControls.admx
  • Resource files/PeerToPeerCaching.admx
  • Resource files/PenTraining.admx
  • Resource files/PerformanceDiagnostics.admx
  • Resource files/PerformancePerftrack.admx
  • Resource files/PowerShellExecutionPolicy.admx
  • Resource files/PreviousVersions.admx
  • Resource files/Programs.admx
  • Resource files/PswdSync.admx
  • Resource files/RPC.admx
  • Resource files/RacWmiProv.admx
  • Resource files/Radar.admx
  • Resource files/ReAgent.admx
  • Resource files/Reliability.admx
  • Resource files/RemoteAssistance.admx
  • Resource files/Scripts.admx
  • Resource files/Securitycenter.admx
  • Resource files/Sensors.admx
  • Resource files/ServerManager.admx
  • Resource files/Servicing.admx
  • Resource files/Setup.admx
  • Resource files/SharedFolders.admx
  • Resource files/Sharing.admx
  • Resource files/Shell-CommandPrompt-RegEditTools.admx
  • Resource files/ShellWelcomeCenter.admx
  • Resource files/Sidebar.admx
  • Resource files/SkyDrive.admx
    .xml
  • Resource files/Snis.admx
  • Resource files/Snmp.admx
  • Resource files/SoundRec.admx
  • Resource files/SystemRestore.admx
  • Resource files/TPM.admx
  • Resource files/TaskScheduler.admx
  • Resource files/Thumbnails.admx
  • Resource files/TouchInput.admx
  • Resource files/W32Time.admx
  • Resource files/WCM.admx
  • Resource files/WDI.admx
  • Resource files/WPN.admx
  • Resource files/WinCal.admx
    .xml
  • Resource files/WinInit.admx
  • Resource files/WinLogon.admx
  • Resource files/WindowsAnytimeUpgrade.admx
  • Resource files/WindowsBackup.admx
  • Resource files/WindowsColorSystem.admx
  • Resource files/WindowsConnectNow.admx
  • Resource files/WindowsFileProtection.admx
  • Resource files/WindowsMail.admx
  • Resource files/WindowsMediaDRM.admx
  • Resource files/WindowsMessenger.admx
  • Resource files/WindowsProducts.admx
  • Resource files/WindowsRemoteShell.admx
  • Resource files/WindowsServer.admx
  • Resource files/Winsrv.admx
  • Resource files/WordWheel.admx
  • Resource files/WorkFolders-Client.admx
  • Resource files/WorkplaceJoin.admx
    .xml
  • Resource files/fthsvc.admx
  • Resource files/hotspotauth.admx
  • Resource files/iSCSI.admx
  • Resource files/kdc.admx
  • Resource files/msched.admx
    .xml
  • Resource files/nca.admx
  • Resource files/pca.admx
  • Resource files/sdiageng.admx
  • Resource files/srm-fci.admx
  • Resource files/wlansvc.admx
    .xml
  • Resource files/wwansvc.admx
    .xml
  • config.txt