General

  • Target

    Pass_1234_Setup.rar

  • Size

    8.4MB

  • MD5

    2f1756b205fd7b8e2b7e5550207e8cff

  • SHA1

    fbe6423c02cb8c7aa02dcb764b0dd1589a25d555

  • SHA256

    0e0ac7d8b285a9a76951a98b7129eabea6f1b5b415305b517154df8e0af99d17

  • SHA512

    ba46bccd0d9de75272a9a98a5f1229f7465d02bbde160e2e4674692e5a7ee62a5082e4daa0e8033915bacfe7d5d3c2e5a418762f8c8677f6b7773b170b9d7abb

  • SSDEEP

    196608:PzYReoj8TrHioRxi2LcY6MnQsZDvLJV/Q5WuIJVXZqJT4MtsvyO5vfH5:M6OUi2Lcb+Q8JVIUuIJSJT4MsKOZ5

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Pass_1234_Setup.rar
    .rar

    Password: 1234

  • Setup_x32_x64.exe
    .exe windows x64

    Password: 1234


    Code Sign

    Headers

    Sections

  • resfile/arial.ttf
  • resfile/bearer/qgenericbearer.dll
    .dll windows x64

    Password: 1234

    7e5a6b3fee029b445d01034aff7a919d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/data/account.json
  • resfile/data/data.json
  • resfile/data/pia.ovpn
  • resfile/data/settings.json
  • resfile/de/RPCDownloader.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RPCFTHost.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RPCFTViewer.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RPCUtilityHost.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RPCUtilityViewer.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RPCViewerUIU.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/de/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/en/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/en/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/es/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fillip.xml
    .xml
  • resfile/fr/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/fr/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/iconengines/qsvgicon.dll
    .dll windows x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qgif.dll
    .dll windows x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qicns.dll
    .dll windows x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qico.dll
    .dll windows x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qjpeg.dll
    .dll windows x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qsvg.dll
    .dll windows x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qtga.dll
    .dll windows x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qtiff.dll
    .dll windows x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qwbmp.dll
    .dll windows x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/imageformats/qwebp.dll
    .dll windows x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/it/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/it/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ja/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/ko/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/nl/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/noahic.xml
    .xml
  • resfile/platforms/qwindows.dll
    .dll windows x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/pt-br/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt-br/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCDownloader.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCFTHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCFTViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCUtilityHost.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCUtilityViewer.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RPCViewerUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RemotePCLauncher.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/RemotePCUIU.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/pt/ViewerHostKeyPopup.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resfile/qmltooling/qmldbg_debugger.dll
    .dll windows x64

    586b25086bb210fcb609fa015c67396d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_inspector.dll
    .dll windows x64

    431ece1fc2dc4bff1058685e8fc37dc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_local.dll
    .dll windows x64

    4121956620909ba19da3d45a8f34ce59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_messages.dll
    .dll windows x64

    090c755495262edadf2edf5a68ec0034


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_native.dll
    .dll windows x64

    0019c6992855405d9e21428361759abf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_nativedebugger.dll
    .dll windows x64

    871b545ce72d59cd6642f9ca65494763


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_preview.dll
    .dll windows x64

    dccf10bc78979e8838a332b8b2582e49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_profiler.dll
    .dll windows x64

    8103dca07e2b3d29a455d71f125d1323


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_quickprofiler.dll
    .dll windows x64

    ba9a724732af29eed64bef24c44103a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_server.dll
    .dll windows x64

    b9f9a3ffada66f802994b150b5306e83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/qmltooling/qmldbg_tcp.dll
    .dll windows x64

    a5d2c1e69b215726350f07d5d0f8e09b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/styles/qwindowsvistastyle.dll
    .dll windows x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resfile/unannexFulfil.xml
    .xml
  • resfile/unboat.xml
    .xml
  • resfile/unhairyCorneinEmbulk.xml
    .xml
  • resfile/upfoldsClagged.xml
    .xml