General

  • Target

    fe.zip

  • Size

    112.7MB

  • MD5

    0c364992729c7a77c71ed876511e5036

  • SHA1

    b9f3e10cc1e7626c085e58373c11fe7e0be8f4c3

  • SHA256

    d404413c638cc696ad52eb9dbe68b3f13fe94db17ae103c849c1828cccc15339

  • SHA512

    f4881dce8db14913ec0f40061ab786d77b4a5d09317b3ccfc089689545ea6372db84ef8934f8b0f7b44e96556f6b6acf26c34731266aba964faf0029d00d5afc

  • SSDEEP

    3145728:KTH7w8SsGKs9Wl1m11n8xpUBn1dfxSn1TNzqIKiv:KTH7w8SK0Wl161n83UBnX47qfiv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 60 IoCs

    Checks for missing Authenticode signature.

Files

  • fe.zip
    .zip

    Password: 123

  • CLibrary.dll
    .dll windows x86

    Password: 123

    c0860108fdeb25ec86b0a06fa2d3758c


    Headers

    Imports

    Sections

  • Hack.pdb
  • Hack.runtimeconfig.dev.json
  • Newtonsoft.Json.dll
    .dll windows x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Paks/EOSSDK-Win64-Shipping.dll
    .dll windows x64

    Password: 123

    81c3815fddf36c54c35a0d8277ca5b38


    Headers

    Imports

    Exports

    Sections

  • Paks/X3DAudio1_7.dll
    .dll windows x64

    Password: 123

    aa754ab37995acbbabc2b4c1aeaeae3e


    Headers

    Imports

    Exports

    Sections

  • Paks/XAPOFX1_5.dll
    .dll windows x64

    Password: 123

    4cb97319eb9c5dc9785040a4a00ae7f6


    Headers

    Imports

    Exports

    Sections

  • Paks/XAudio2_7.dll
    .dll regsvr32 windows x64

    Password: 123

    21074b38564ec2f4538b180186307209


    Headers

    Imports

    Exports

    Sections

  • Paks/api-ms-win-core-console-l1-1-0.dll
    .dll windows x64

    Password: 123


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-console-l1-2-0.dll
    .dll windows x64

    Password: 123


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-debug-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-file-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-file-l1-2-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-file-l2-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-handle-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-heap-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-localization-l1-2-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-memory-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-profile-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-string-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-synch-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-synch-l1-2-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-core-util-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-math-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-private-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-process-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-string-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-time-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows x64


    Headers

    Exports

    Sections

  • Paks/boost_atomic-mt-x64.dll
    .dll windows x64

    28da39522811620567f60c94c252a59f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_chrono-mt-x64.dll
    .dll windows x64

    e89d14f45445478007d329476a1b9625


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_filesystem-mt-x64.dll
    .dll windows x64

    b4dfb1e0fd36f6e91d33a40b6dfcfa8c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_iostreams-mt-x64.dll
    .dll windows x64

    320482b1e23571ff5244c427f42c889d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_program_options-mt-x64.dll
    .dll windows x64

    2776ee91e9b80ff5d21f6575f3a791d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_python39-mt-x64.dll
    .dll windows x64

    a05b9a75005b60e4a52f25b7bd39dab1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_regex-mt-x64.dll
    .dll windows x64

    185a6acf03cab92d806bce5acc84e233


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_system-mt-x64.dll
    .dll windows x64

    3ca6b39e7e05f1883ec4635bc9c1b9bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/boost_thread-mt-x64.dll
    .dll windows x64

    e6b4977053dfb45a28d0afbc246c6d82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/concrt140.dll
    .dll windows x64

    e29b9617328962a9b58721e88e2fd959


    Headers

    Imports

    Exports

    Sections

  • Paks/dbghelp.dll
    .dll windows x64

    a85654ad1c6f02f9037c7fb457c5ed50


    Headers

    Imports

    Exports

    Sections

  • Paks/global.ucas
  • Paks/global.utoc
  • Paks/msvcp140.dll
    .dll windows x64

    c0e775d13a8146396b3de4dc441694a7


    Headers

    Imports

    Exports

    Sections

  • Paks/msvcp140_1.dll
    .dll windows x64

    a1d1434dddb062f5f5d6615852def52b


    Headers

    Imports

    Exports

    Sections

  • Paks/msvcp140_2.dll
    .dll windows x64

    8ceeb902c9887e633d0dec0e28e97944


    Headers

    Imports

    Exports

    Sections

  • Paks/msvcp140_codecvt_ids.dll
    .dll windows x64

    eb741a767a6a80709b865cd0789aabcf


    Headers

    Imports

    Exports

    Sections

  • Paks/pakchunk0-WindowsClient.pak
  • Paks/pakchunk0-WindowsClient.sig
  • Paks/pakchunk0-WindowsClient.utoc
  • Paks/pakchunk0optional-WindowsClient.pak
  • Paks/pakchunk0optional-WindowsClient.sig
  • Paks/pakchunk0optional-WindowsClient.ucas
  • Paks/pakchunk0optional-WindowsClient.utoc
  • Paks/pakchunk8-WindowsClient.pak
  • Paks/pakchunk8-WindowsClient.sig
  • Paks/pakchunk8optional-WindowsClient.pak
  • Paks/pakchunk8optional-WindowsClient.sig
  • Paks/pakchunk8optional-WindowsClient.ucas
  • Paks/pakchunk8optional-WindowsClient.utoc
  • Paks/tbb.dll
    .dll windows x64

    4c74380b450a7a0ff4d566f16a86ccb8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/tbb12.dll
    .dll windows x64

    46c8e924ddd665228880dd7dd5aa7b91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Paks/ucrtbase.dll
    .dll windows x64

    5ae9a136fafa10321f3d48251bf4f6a1


    Headers

    Imports

    Exports

    Sections

  • Paks/vccorlib140.dll
    .dll windows x64

    4a5f3c3aa39a4e0497dff0471239d5f9


    Headers

    Imports

    Exports

    Sections

  • Paks/vcruntime140.dll
    .dll windows x64

    f143e2868efde0fcb493bd3051708a62


    Headers

    Imports

    Exports

    Sections

  • Paks/vcruntime140_1.dll
    .dll windows x64

    ae0bde6314fa2027b54ce04898f6ab69


    Headers

    Imports

    Exports

    Sections

  • Paks/xinput1_3.dll
    .dll windows x64

    cfb6d24996ee7fd94a9861f495966a8f


    Headers

    Imports

    Exports

    Sections

  • README.txt
  • Serilog.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SevenZip.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • injector.exe
    .exe windows x86

    9a619ff592c613c85b0e236f7bccecff


    Headers

    Imports

    Exports

    Sections