General

  • Target

    C.7z

  • Size

    201.3MB

  • MD5

    580858976ac29fc19779b8b700ee27f7

  • SHA1

    b82462241ae3498ceb09b58a128899f4bb90ada8

  • SHA256

    100be98a40c2c406ce95ae310b6e92108e992e807d3f7c6765591cf58808b1aa

  • SHA512

    e0eadeca6f586da318ab9382fda034d238b69dfe3b13db604ff06b41200158620f973412d42189058a05133d621ff2363beed47c720ac57a9666988f95b98092

  • SSDEEP

    6291456:vJp6m8mgxIBtPl5MfyRTMPE1sdE54ql+H+y:vJpTgkltMs1sdYl0H+y

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • Office document contains embedded OLE objects 2 IoCs

    Detected embedded OLE objects in Office documents.

Files

  • C.7z
    .7z
  • Eliminar windowsOK/Eliminar windows/Comdlg32.ocx
    .dll regsvr32 windows x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Eliminar windowsOK/Eliminar windows/Copia de seguridad de Eliminador de Windows.wbk
    .docx .wbk office2007
  • Eliminar windowsOK/Eliminar windows/Eliminador de Windows.docx
    .docx office2007
  • Eliminar windowsOK/Eliminar windows/Eliminador de Windows.pdf
    .pdf
  • Eliminar windowsOK/Eliminar windows/Loader.exe
    .exe windows x86

    7d10357d880ff287c72bb2ccd147f462


    Headers

    Imports

    Sections

  • Eliminar windowsOK/Eliminar windows/comctl32.ocx
    .dll regsvr32 windows x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Eliminar windowsOK/Eliminar windows/configurador.exe
    .exe windows x86

    7482d531269a3f6b0c06b34368060c1c


    Headers

    Imports

    Sections

  • Eliminar windowsOK/Eliminar windows/creditos.txt
  • Eliminar windowsOK/Eliminar windows/graficos/1p.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/1p.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/2p.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/3p.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/Azul el_ctrico 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/Blinky anim 40x40.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/Blinky.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/Dibujo.JPG
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/Dibujo.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/Dibujo1.JPG
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/Metal.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/Mono Metal.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/PacMan.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/Thumbs.db
  • Eliminar windowsOK/Eliminar windows/graficos/atmosfera 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/atmosfera 800x600.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/blue.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/blue.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/bola 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/degradado1 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/destello azul 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/flecha.bmp
  • Eliminar windowsOK/Eliminar windows/graficos/fondo arcade classics 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/fondo pacman 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/fondo pacman 800x600.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/gaminator.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/lava 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/menu.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/mm_bellypanel.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/pacscene.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/resplandor naranja 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/rtype.gif
    .gif
  • Eliminar windowsOK/Eliminar windows/graficos/scanblue 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/scanblue 800x600.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/scanorange 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/scanorange 800x600.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/scanred 640x480.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/graficos/scanred 800x600.jpg
    .jpg
  • Eliminar windowsOK/Eliminar windows/loader.ini
  • Eliminar windowsOK/Eliminar windows/loader.rar
    .rar
  • GAMBLER FAIRYQUEEN/AlwaysHot.gambler
  • GAMBLER FAIRYQUEEN/BananaSplash.gambler
  • GAMBLER FAIRYQUEEN/BeetleMania.gambler
  • GAMBLER FAIRYQUEEN/BookOfRa.gambler
  • GAMBLER FAIRYQUEEN/Columbus.gambler
  • GAMBLER FAIRYQUEEN/Common.gambler
  • GAMBLER FAIRYQUEEN/Core.gambler
  • GAMBLER FAIRYQUEEN/DolphinsPearl.gambler
  • GAMBLER FAIRYQUEEN/DynastyOfMing.gambler
  • GAMBLER FAIRYQUEEN/Illusionist.gambler
  • GAMBLER FAIRYQUEEN/Instrucciones de Instalación.docx
    .docx office2007
  • GAMBLER FAIRYQUEEN/KingOfCards.gambler
  • GAMBLER FAIRYQUEEN/LastLog.txt
  • GAMBLER FAIRYQUEEN/LuckyLadysCharm.gambler
  • GAMBLER FAIRYQUEEN/MultiGambler.exe
    .exe windows x86


    Headers

    Sections

  • GAMBLER FAIRYQUEEN/MultiGambler.exe - Shortcut.lnk
    .lnk
  • GAMBLER FAIRYQUEEN/Novomatic Gaminator ColdFire II.docx
    .docx office2007
  • GAMBLER FAIRYQUEEN/PharaohsGoldII.gambler
  • GAMBLER FAIRYQUEEN/PharaonsGoldIII.gambler
  • GAMBLER FAIRYQUEEN/PolarFox.gambler
  • GAMBLER FAIRYQUEEN/QueenOfHearts.resource
  • GAMBLER FAIRYQUEEN/RoyalTreasures.gambler
  • GAMBLER FAIRYQUEEN/Sharky.resource
  • GAMBLER FAIRYQUEEN/SizzlingHot.gambler
  • GAMBLER FAIRYQUEEN/TheMoneyGame.gambler
  • GAMBLER FAIRYQUEEN/UltraHot.gambler
  • GAMBLER FAIRYQUEEN/UnicornMagic.gambler
  • GAMBLER FAIRYQUEEN/WonderfulFlute.gambler
  • GAMBLER FAIRYQUEEN/coldfire.ini
  • GAMBLER FAIRYQUEEN/intruder.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • GAMBLER FAIRYQUEEN/msvcm90.dll
    .dll windows x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • GAMBLER FAIRYQUEEN/msvcp90.dll
    .dll windows x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GAMBLER FAIRYQUEEN/msvcr90.dll
    .dll windows x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GAMBLER FAIRYQUEEN/teclado.txt
  • loader.ini