Errors

Reason
too many matches

General

  • Target

    MDE_File_Sample_a58e7e79a6ae4cd98779c9cb8387acb0d15ab1fe.zip

  • Size

    4.4MB

  • MD5

    70e21f89fa08e315c84f1676c970b0ff

  • SHA1

    409b20c31eaea0b7960cc84b8a185c632cc7de5d

  • SHA256

    311b3e01136c34f6121897d31cefea8a94b82d173d1022db90744064c10788b5

  • SHA512

    a626797235f20ab4339a9036feb4546596fae0e3e4c4ad12e058fa3d2df54a279f54fa34b49792f607ea54dd1bd159f2dab386a3d2e88dd33749708724d75390

  • SSDEEP

    98304:Q5yO8LFzJjO55KYlj9c49SzYt7V4LZUWlLgkiIU+tFnWE:YyzLxJjWUasz+slERytD

Score
10/10

Malware Config

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MDE_File_Sample_a58e7e79a6ae4cd98779c9cb8387acb0d15ab1fe.zip
    .zip

    Password: Cis0

  • Full_Complete_Setup.zip
    .zip

    Password: Cis0

  • Setup.exe
    .exe windows x86

    Password: Cis0


    Headers

    Sections

  • resource/Lang/0404.DAT
  • resource/Lang/0405.DAT
  • resource/Lang/0406.DAT
  • resource/Lang/0407.DAT
  • resource/Lang/0409.DAT
  • resource/Lang/040A.DAT
  • resource/Lang/040B.DAT
  • resource/Lang/040C.DAT
  • resource/Lang/040E.DAT
  • resource/Lang/0410.DAT
  • resource/Lang/0411.DAT
  • resource/Lang/0412.DAT
  • resource/Lang/0413.DAT
  • resource/Lang/0414.DAT
  • resource/Lang/0419.DAT
  • resource/Lang/041A.DAT
  • resource/Lang/041D.DAT
  • resource/Lang/041E.DAT
  • resource/Lang/041F.DAT
  • resource/Lang/0424.DAT
  • resource/Lang/042A.DAT
  • resource/Lang/0804.DAT
  • resource/Lang/0816.DAT
  • resource/Lang/0C04.DAT
  • resource/RedistList/Columm/bangJarfuls/bicronLoopier.xml
    .xml
  • resource/RedistList/Columm/bangJarfuls/fullamWhealedParpend.xml
    .xml
  • resource/RedistList/Columm/bangJarfuls/hamital.xml
    .xml
  • resource/RedistList/Columm/bangJarfuls/peptoneLaikHomely.xml
    .xml
  • resource/RedistList/Columm/bangJarfuls/spurreyGladsMorae.xml
    .xml
  • resource/RedistList/Columm/bangJarfuls/whissle.xml
    .xml
  • resource/RedistList/Columm/dagEavesChest.xml
    .xml
  • resource/RedistList/Columm/fooled/favnJacklegHangar.xml
    .xml
  • resource/RedistList/Columm/fooled/inhalerFaba.xml
    .xml
  • resource/RedistList/Columm/fooled/luggingAinhum.xml
    .xml
  • resource/RedistList/Columm/fooled/parfaitUnfelon.xml
    .xml
  • resource/RedistList/Columm/fooled/pokey.xml
    .xml
  • resource/RedistList/Columm/fooled/raringCzechScreaky.xml
    .xml
  • resource/RedistList/Columm/gamebagSilting.xml
    .xml
  • resource/RedistList/Columm/seismal.xml
    .xml
  • resource/RedistList/Columm/spavinsScalls.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/astrerDoolies.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/bettinePloughs.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/forfear.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/oreticMintersSemiurn.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/pompanoTapetal.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/scoutsWatches.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/shimmerAlquierEspinos.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/thraxAcarid.xml
    .xml
  • resource/RedistList/Columm/tappitAllying/unlushSpleetMidmorn.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/carniesLamp.xml
    .xml .wsf
  • resource/RedistList/Columm/whipsKnarredFilles/ferriRichestMacacos.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/flicky.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/grataPotting.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/hepcat.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/insteamLapinTybalt.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/korwaColonel.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/laniateMalisonMinoan.xml
    .xml .wsf
  • resource/RedistList/Columm/whipsKnarredFilles/margauxSteghTaluche.xml
    .xml .wsf
  • resource/RedistList/Columm/whipsKnarredFilles/nilousSubpoolGazabos.xml
    .xml
  • resource/RedistList/Columm/whipsKnarredFilles/poxed.xml
    .xml
  • resource/RedistList/Columm/yeatPulasMolle.xml
    .xml
  • resource/RedistList/FrameworkList.xml
  • resource/RedistList/alaiDampy.xml
    .xml
  • resource/RedistList/batatasDeucedSabreur.xml
    .xml
  • resource/RedistList/exerceSprettyMitua.xml
    .xml
  • resource/RedistList/imer.xml
    .xml
  • resource/RedistList/legatoVacates.xml
    .xml
  • resource/RedistList/moksha.xml
    .xml
  • resource/RedistList/nainHealful.xml
    .xml
  • resource/RedistList/raxing.xml
    .xml
  • resource/RedistList/sixsome.xml
    .xml
  • resource/RedistList/unniceDicetyl.xml
    .xml
  • resource/locale/cs/2DSymbolPlugin.xml
    .xml
  • resource/locale/cs/BarcodePlugin.xml
    .xml
  • resource/locale/cs/EJPlugin.xml
    .xml
  • resource/locale/cs/FontReplacePlugin.xml
    .xml
  • resource/locale/cs/LayoutPlugin.xml
    .xml
  • resource/locale/cs/LogoSettingPlugin.xml
    .xml
  • resource/locale/cs/SendCommandPlugin.xml
    .xml
  • resource/locale/cs/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/da/2DSymbolPlugin.xml
    .xml
  • resource/locale/da/BarcodePlugin.xml
    .xml
  • resource/locale/da/EJPlugin.xml
    .xml
  • resource/locale/da/FontReplacePlugin.xml
    .xml
  • resource/locale/da/LayoutPlugin.xml
    .xml
  • resource/locale/da/LogoSettingPlugin.xml
    .xml
  • resource/locale/da/SendCommandPlugin.xml
    .xml
  • resource/locale/da/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/de/2DSymbolPlugin.xml
    .xml
  • resource/locale/de/BarcodePlugin.xml
    .xml
  • resource/locale/de/EJPlugin.xml
    .xml
  • resource/locale/de/FontReplacePlugin.xml
    .xml
  • resource/locale/de/LayoutPlugin.xml
    .xml
  • resource/locale/de/LogoSettingPlugin.xml
    .xml
  • resource/locale/de/SendCommandPlugin.xml
    .xml
  • resource/locale/de/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/en/2DSymbolPlugin.xml
    .xml
  • resource/locale/en/BarcodePlugin.xml
    .xml
  • resource/locale/en/EJPlugin.xml
    .xml
  • resource/locale/en/FontReplacePlugin.xml
    .xml
  • resource/locale/en/LayoutPlugin.xml
    .xml
  • resource/locale/en/LogoSettingPlugin.xml
    .xml
  • resource/locale/en/SendCommandPlugin.xml
    .xml
  • resource/locale/en/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/es/2DSymbolPlugin.xml
    .xml
  • resource/locale/es/BarcodePlugin.xml
    .xml
  • resource/locale/es/EJPlugin.xml
    .xml
  • resource/locale/es/FontReplacePlugin.xml
    .xml
  • resource/locale/es/LayoutPlugin.xml
    .xml
  • resource/locale/es/LogoSettingPlugin.xml
    .xml
  • resource/locale/es/SendCommandPlugin.xml
    .xml
  • resource/locale/es/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/fi/2DSymbolPlugin.xml
    .xml
  • resource/locale/fi/BarcodePlugin.xml
    .xml
  • resource/locale/fi/EJPlugin.xml
    .xml
  • resource/locale/fi/FontReplacePlugin.xml
    .xml
  • resource/locale/fi/LayoutPlugin.xml
    .xml
  • resource/locale/fi/LogoSettingPlugin.xml
    .xml
  • resource/locale/fi/SendCommandPlugin.xml
    .xml
  • resource/locale/fi/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/fr/2DSymbolPlugin.xml
    .xml
  • resource/locale/fr/BarcodePlugin.xml
    .xml
  • resource/locale/fr/EJPlugin.xml
    .xml
  • resource/locale/fr/FontReplacePlugin.xml
    .xml
  • resource/locale/fr/LayoutPlugin.xml
    .xml
  • resource/locale/fr/LogoSettingPlugin.xml
    .xml
  • resource/locale/fr/SendCommandPlugin.xml
    .xml
  • resource/locale/fr/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/hr/2DSymbolPlugin.xml
    .xml
  • resource/locale/hr/BarcodePlugin.xml
    .xml
  • resource/locale/hr/EJPlugin.xml
    .xml
  • resource/locale/hr/FontReplacePlugin.xml
    .xml
  • resource/locale/hr/LayoutPlugin.xml
    .xml
  • resource/locale/hr/LogoSettingPlugin.xml
    .xml
  • resource/locale/hr/SendCommandPlugin.xml
    .xml
  • resource/locale/hr/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/hu/2DSymbolPlugin.xml
    .xml
  • resource/locale/hu/BarcodePlugin.xml
    .xml
  • resource/locale/hu/EJPlugin.xml
    .xml
  • resource/locale/hu/FontReplacePlugin.xml
    .xml
  • resource/locale/hu/LayoutPlugin.xml
    .xml
  • resource/locale/hu/LogoSettingPlugin.xml
    .xml
  • resource/locale/hu/SendCommandPlugin.xml
    .xml
  • resource/locale/hu/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/it/2DSymbolPlugin.xml
    .xml
  • resource/locale/it/BarcodePlugin.xml
    .xml
  • resource/locale/it/EJPlugin.xml
    .xml
  • resource/locale/it/FontReplacePlugin.xml
    .xml
  • resource/locale/it/LayoutPlugin.xml
    .xml
  • resource/locale/it/LogoSettingPlugin.xml
    .xml
  • resource/locale/it/SendCommandPlugin.xml
    .xml
  • resource/locale/it/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/ja/2DSymbolPlugin.xml
    .xml
  • resource/locale/ja/BarcodePlugin.xml
    .xml
  • resource/locale/ja/EJPlugin.xml
    .xml
  • resource/locale/ja/FontReplacePlugin.xml
    .xml
  • resource/locale/ja/LayoutPlugin.xml
    .xml
  • resource/locale/ja/LogoSettingPlugin.xml
    .xml
  • resource/locale/ja/SendCommandPlugin.xml
    .xml
  • resource/locale/ja/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/ko/2DSymbolPlugin.xml
    .xml
  • resource/locale/ko/BarcodePlugin.xml
    .xml
  • resource/locale/ko/EJPlugin.xml
    .xml
  • resource/locale/ko/FontReplacePlugin.xml
    .xml
  • resource/locale/ko/LayoutPlugin.xml
    .xml
  • resource/locale/ko/LogoSettingPlugin.xml
    .xml
  • resource/locale/ko/SendCommandPlugin.xml
    .xml
  • resource/locale/ko/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/nl/2DSymbolPlugin.xml
    .xml
  • resource/locale/nl/BarcodePlugin.xml
    .xml
  • resource/locale/nl/EJPlugin.xml
    .xml
  • resource/locale/nl/FontReplacePlugin.xml
    .xml
  • resource/locale/nl/LayoutPlugin.xml
    .xml
  • resource/locale/nl/LogoSettingPlugin.xml
    .xml
  • resource/locale/nl/SendCommandPlugin.xml
    .xml
  • resource/locale/nl/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/no/2DSymbolPlugin.xml
    .xml
  • resource/locale/no/BarcodePlugin.xml
    .xml
  • resource/locale/no/EJPlugin.xml
    .xml
  • resource/locale/no/FontReplacePlugin.xml
    .xml
  • resource/locale/no/LayoutPlugin.xml
    .xml
  • resource/locale/no/LogoSettingPlugin.xml
    .xml
  • resource/locale/no/SendCommandPlugin.xml
    .xml
  • resource/locale/no/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/pt/2DSymbolPlugin.xml
    .xml
  • resource/locale/pt/BarcodePlugin.xml
    .xml
  • resource/locale/pt/EJPlugin.xml
    .xml
  • resource/locale/pt/FontReplacePlugin.xml
    .xml
  • resource/locale/pt/LayoutPlugin.xml
    .xml
  • resource/locale/pt/LogoSettingPlugin.xml
    .xml
  • resource/locale/pt/SendCommandPlugin.xml
    .xml
  • resource/locale/pt/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/ru/2DSymbolPlugin.xml
    .xml
  • resource/locale/ru/BarcodePlugin.xml
    .xml
  • resource/locale/ru/EJPlugin.xml
    .xml
  • resource/locale/ru/FontReplacePlugin.xml
    .xml
  • resource/locale/ru/LayoutPlugin.xml
    .xml
  • resource/locale/ru/LogoSettingPlugin.xml
    .xml
  • resource/locale/ru/SendCommandPlugin.xml
    .xml
  • resource/locale/ru/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/sl/2DSymbolPlugin.xml
    .xml
  • resource/locale/sl/BarcodePlugin.xml
    .xml
  • resource/locale/sl/EJPlugin.xml
    .xml
  • resource/locale/sl/FontReplacePlugin.xml
    .xml
  • resource/locale/sl/LayoutPlugin.xml
    .xml
  • resource/locale/sl/LogoSettingPlugin.xml
    .xml
  • resource/locale/sl/SendCommandPlugin.xml
    .xml
  • resource/locale/sl/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/sv/2DSymbolPlugin.xml
    .xml
  • resource/locale/sv/BarcodePlugin.xml
    .xml
  • resource/locale/sv/EJPlugin.xml
    .xml
  • resource/locale/sv/FontReplacePlugin.xml
    .xml
  • resource/locale/sv/LayoutPlugin.xml
    .xml
  • resource/locale/sv/LogoSettingPlugin.xml
    .xml
  • resource/locale/sv/SendCommandPlugin.xml
    .xml
  • resource/locale/sv/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/th/2DSymbolPlugin.xml
    .xml
  • resource/locale/th/BarcodePlugin.xml
    .xml
  • resource/locale/th/EJPlugin.xml
    .xml
  • resource/locale/th/FontReplacePlugin.xml
    .xml
  • resource/locale/th/LayoutPlugin.xml
    .xml
  • resource/locale/th/LogoSettingPlugin.xml
    .xml
  • resource/locale/th/SendCommandPlugin.xml
    .xml
  • resource/locale/th/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/tr/2DSymbolPlugin.xml
    .xml
  • resource/locale/tr/BarcodePlugin.xml
    .xml
  • resource/locale/tr/EJPlugin.xml
    .xml
  • resource/locale/tr/FontReplacePlugin.xml
    .xml
  • resource/locale/tr/LayoutPlugin.xml
    .xml
  • resource/locale/tr/LogoSettingPlugin.xml
    .xml
  • resource/locale/tr/SendCommandPlugin.xml
    .xml
  • resource/locale/tr/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/vi/2DSymbolPlugin.xml
    .xml
  • resource/locale/vi/BarcodePlugin.xml
    .xml
  • resource/locale/vi/EJPlugin.xml
    .xml
  • resource/locale/vi/FontReplacePlugin.xml
    .xml
  • resource/locale/vi/LayoutPlugin.xml
    .xml
  • resource/locale/vi/LogoSettingPlugin.xml
    .xml
  • resource/locale/vi/SendCommandPlugin.xml
    .xml
  • resource/locale/vi/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/zh-cn/2DSymbolPlugin.xml
    .xml
  • resource/locale/zh-cn/BarcodePlugin.xml
    .xml
  • resource/locale/zh-cn/EJPlugin.xml
    .xml
  • resource/locale/zh-cn/FontReplacePlugin.xml
    .xml
  • resource/locale/zh-cn/LayoutPlugin.xml
    .xml
  • resource/locale/zh-cn/LogoSettingPlugin.xml
    .xml
  • resource/locale/zh-cn/SendCommandPlugin.xml
    .xml
  • resource/locale/zh-cn/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/zh-hk/2DSymbolPlugin.xml
    .xml
  • resource/locale/zh-hk/BarcodePlugin.xml
    .xml
  • resource/locale/zh-hk/EJPlugin.xml
    .xml
  • resource/locale/zh-hk/FontReplacePlugin.xml
    .xml
  • resource/locale/zh-hk/LayoutPlugin.xml
    .xml
  • resource/locale/zh-hk/LogoSettingPlugin.xml
    .xml
  • resource/locale/zh-hk/SendCommandPlugin.xml
    .xml
  • resource/locale/zh-hk/UserDefinedPaperPlugin.xml
    .xml
  • resource/locale/zh-tw/2DSymbolPlugin.xml
    .xml
  • resource/locale/zh-tw/BarcodePlugin.xml
    .xml
  • resource/locale/zh-tw/EJPlugin.xml
    .xml
  • resource/locale/zh-tw/FontReplacePlugin.xml
    .xml
  • resource/locale/zh-tw/LayoutPlugin.xml
    .xml
  • resource/locale/zh-tw/LogoSettingPlugin.xml
    .xml
  • resource/locale/zh-tw/SendCommandPlugin.xml
    .xml
  • resource/locale/zh-tw/UserDefinedPaperPlugin.xml
    .xml