Resubmissions

15-08-2023 18:26

230815-w3cf1ach29 3

15-08-2023 17:15

230815-vst3macd32 3

General

  • Target

    BAL-0590-SU.zip

  • Size

    76.1MB

  • MD5

    3b3c548e4a06ac8606b14748242e878e

  • SHA1

    bf73e2fab7c55ae6755f1e8ab2a7db81a6f78a23

  • SHA256

    dfe7cb07fa975461082cb6ba3dbf8d13e3ef89d6010532fae0cf94125af384bb

  • SHA512

    d5585ab9262dfd281b267c498af2b4dbb7e21b11fc72e50a304476a3d59d74cfe803c8ca0ae7ca8975ed665f93a688d0f75bcab55825f85194a621e3d9d5f150

  • SSDEEP

    1572864:bd7p28NRsyhGkb69tvjwrVd4Mgg7pnYMskvdRp3uwjAoDmxe0:fRsVoixo34k7CAZelU8e0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • BAL-0590-SU.zip
    .zip
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/DB/01_MCE_DB.sql
    .vbs
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/DB/02_MCE_SUN_DB.sql
    .vbs
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/DB/03_MCE_AcessoCA.sql
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/DB/04_AcessoCA_itgREL01_ParamGlobal.sql
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/MCE.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/MCE.exe.config.padrao
    .xml
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.C1Excel.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.C1Pdf.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.C1Report.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.C1Word.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.C1Zip.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.BarCode.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.Bitmap.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1Command.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1DX.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1Document.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1FlexGrid.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1FlexGrid.ImportExport.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1Input.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.C1Report.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.FlexChart.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/C1.Win.ImportServices.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/Microsoft.WindowsAPICodePack.Shell.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/Microsoft.WindowsAPICodePack.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/Microsoft.WindowsAPICodePack.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/SUN_Contabilizador.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/SUN_Contabilizador.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg.MCE.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg.MCE.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.SUN.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.SUN.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.com.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.com.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.win.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg01.win.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg02.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Modulos/MCE2/PLUGINS/SUN/itg02.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/MCE2.wserv.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/MCE2.wserv.exe.config.padrao
    .xml
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.C1Excel.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.C1Pdf.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.C1Report.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.C1Word.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.C1Zip.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.BarCode.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.Bitmap.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1Command.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1DX.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1Document.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1FlexGrid.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1FlexGrid.ImportExport.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1Input.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.C1Report.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.FlexChart.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/C1.Win.ImportServices.4.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/Microsoft.WindowsAPICodePack.Shell.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/Microsoft.WindowsAPICodePack.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/Microsoft.WindowsAPICodePack.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/SUN_Contabilizador.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/SUN_Contabilizador.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg.MCE.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg.MCE.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.SUN.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.SUN.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.com.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.com.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.win.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg01.win.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg02.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/PLUGINS/SUN/itg02.pdb
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/ITG_Service/MCE2.wserv/install.bat
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/MCE_Installation_Instructions.docx
    .docx office2007
  • BAL-0590-SU/MCE-0032-SU_v2.17.1.0/MCE_Instrucao_Instalacao_pt-br.docx
    .docx office2007