General

  • Target

    Setupppp.rar

  • Size

    2.7MB

  • MD5

    b92274784508801cc505787210efecc7

  • SHA1

    edddb4e063c4c1b06de759479bc368817601e6c3

  • SHA256

    9d7429145a7643272e55fb1e756582ea9e3dd2daf182c518ee9816f44d81cf81

  • SHA512

    e0b2bd505e515eb6c0f9d303cc3d3fc3797a23d36c38e43ff46e808bd4b920e6ea2f5b2fe7e836a4b4ff2a555956e2e8bac379ee63ccbe75fac9a5ced63d034c

  • SSDEEP

    49152:i+7Kh+VRGEfU4z0J3VVHTych7Rwy0KputAmb6iqnOyG/0Onc63bg:iiKhcGMcfHTygl0uutJzfg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setupppp.rar
    .rar

    Password: 1231

  • Setupppp/D3Dcompiler_47.dll
    .dll windows x86

    Password: 1231

    f63cad154afed6da772d0ab361f448f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setupppp/Setup.exe
    .exe windows x86

    Password: 1231

    cae5900a92ba6c4de6ecf85e5f8c7e5c


    Headers

    Imports

    Sections

  • Setupppp/libEGL.dll
    .dll windows x86

    Password: 1231

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setupppp/libeay32.dll
    .dll windows x86

    Password: 1231

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setupppp/platforms/qwindows.dll
    .dll windows x86

    Password: 1231

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setupppp/translations/qt_ca.qm
  • Setupppp/translations/qt_cs.qm
  • Setupppp/translations/qt_de.qm
  • Setupppp/translations/qt_en.qm
  • Setupppp/translations/qt_fi.qm
  • Setupppp/translations/qt_fr.qm
  • Setupppp/translations/qt_he.qm
  • Setupppp/translations/qt_hu.qm
  • Setupppp/translations/qt_it.qm
  • Setupppp/translations/qt_ja.qm
  • Setupppp/translations/qt_ko.qm
  • Setupppp/translations/qt_lv.qm
  • Setupppp/translations/qt_ru.qm
  • Setupppp/translations/qt_sk.qm
  • Setupppp/translations/qt_uk.qm