General

  • Target

    Illegal_Services-main.rar

  • Size

    12.5MB

  • MD5

    c8413216ca5253448c28f8d624598560

  • SHA1

    b410c8ef45a0120cd352ecd017cc5f653e85ea59

  • SHA256

    1c814b3e4c9685df73d89843e014e8a422c652a49d773cb40da2eedfc1808b26

  • SHA512

    7910f76128da568d1fd10223a7b29e4bf2c03c74861d7b8a9443c7fada115c6441d0d4e7c60bea8da79ff4554cf668be5aa6311b5d278fe5abc74f94ca704bdf

  • SSDEEP

    393216:OneKvfs+8SsGIAdXeGMg9M2cAhBqJ0CEk6e2ey:OB3sWsJJg9LBe0CIGy

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • Illegal_Services-main.rar
    .rar
  • Illegal_Services-main/.gitignore
  • Illegal_Services-main/COPYING
  • Illegal_Services-main/ChangeLog.txt
  • Illegal_Services-main/EULA.rtf
    .rtf
  • Illegal_Services-main/Illegal_Services.exe
    .exe windows x86

    36bf6b5a48b2d08fc5c7aac1ec04beca


    Headers

    Imports

    Sections

  • Illegal_Services-main/README.md
  • Illegal_Services-main/Tutorial.html
    .html
  • Illegal_Services-main/lib/7za/x64/7za.dll
    .dll windows x64

    22ca0a9fa52636be630f15cf36ce68e9


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x64/7za.exe
    .exe windows x64

    7232d06dc00920698f0cad2452012553


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/7za/x64/7zxa.dll
    .dll windows x64

    aca74ba801aaf3b47c3daa7d7e22a9db


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x86/7za.dll
    .dll windows x86

    cb36a1cf1dc11c2231c4415295a85d2f


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x86/7za.exe
    .exe windows x86

    1a9deef54b6b9763013f742bee84d533


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/7za/x86/7zxa.dll
    .dll windows x86

    b56c6d8dc50f73376215a3b3ddce91c0


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/OpenFileBox.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/SaveFileBox.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/backgrounds/background-1.jpg
  • Illegal_Services-main/lib/backgrounds/background-10.jpg
  • Illegal_Services-main/lib/backgrounds/background-11.jpg
  • Illegal_Services-main/lib/backgrounds/background-12.jpg
  • Illegal_Services-main/lib/backgrounds/background-2.jpg
  • Illegal_Services-main/lib/backgrounds/background-3.jpg
  • Illegal_Services-main/lib/backgrounds/background-4.jpg
  • Illegal_Services-main/lib/backgrounds/background-5.jpg
  • Illegal_Services-main/lib/backgrounds/background-6.jpg
  • Illegal_Services-main/lib/backgrounds/background-7.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-8.jpg
    .ps1
  • Illegal_Services-main/lib/backgrounds/background-9.jpg
  • Illegal_Services-main/lib/binread/x64/binread.exe
    .exe windows x64

    94e41874fd27bb9cd79133e7f21b03b3


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/binread/x86/binread.exe
    .exe windows x86

    7ab5906e263541420d9860e0e5264a71


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/bookmarks_parser.exe
    .exe windows x86

    22604f514dda14fc9e9e932cbc54e1b0


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/cmdbkg.exe
    .exe windows x86

    ef8cd7f18a9b59b15033fbc2e15348e2


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/cmdwiz.exe
    .exe windows x86

    358255d310d10c44d53b3032e06b8b63


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/curl/x64/curl.exe
    .exe windows x64

    4cfce998a3d48ef31b71ac123f68c0ae


    Code Sign

    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/curl/x86/curl.exe
    .exe windows x86

    b53be2138b8b846f28314270895351c4


    Code Sign

    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/speak/EN.lang
  • Illegal_Services-main/lib/speak/FR.lang
  • Illegal_Services-main/lib/speak/x64/speak-x64.exe
    .exe windows x64


    Headers

    Sections

  • Illegal_Services-main/lib/speak/x86/speak-x86.exe
    .exe windows x86


    Headers

    Sections