Resubmissions

24-09-2023 15:33

230924-szdm4shh59 3

General

  • Target

    Meiqia1.cab

  • Size

    99.4MB

  • MD5

    ea099ba3979764971fe13ef824db93ae

  • SHA1

    ed03a287ec6f04ae26b35917b84eb054cc431640

  • SHA256

    6a0664da0332aa8f4428914ba6aff37506fd239776a881e6d24f1cf5b60cbb70

  • SHA512

    1910d7725d579335c793831ee36628c0c2613dc6264135d6c501529095e52de6444ffd4e68b2193f200b33e2d7db7e66d57c584715513cdb8a2de3322e1b9e8a

  • SSDEEP

    3145728:kmziZRAXypzez0XW/y2FEakt0lePhYOMuEVGXdu:kmWZMy9ezVs0e8/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Meiqia1.cab
    .cab
  • CrashHandler.dll
    .dll windows x86

    07d59c5eb2ad9a9bc5361d1f443a3420


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HipsDB.dll
    .dll windows x86

    c08a2aae4eab65a887d764ad14f9d19c


    Code Sign

    Headers

    Imports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • Meiq.exe
    .exe windows x86

    b1ce568f2fe432a092716eac50dcbb9e


    Code Sign

    Headers

    Imports

    Sections

  • Meiqi.exe
    .exe windows x64

    09edda3803c609000e00c632200873c3


    Headers

    Imports

    Exports

    Sections

  • af.pak
  • am.pak
  • app.asar
  • appupdate.yml
  • ar.pak
  • behavior.dll
    .dll windows x86

    bbca16973f969f1fccaa25e8d44d7379


    Code Sign

    Headers

    Imports

    Sections

  • bg.pak
  • bn.pak
  • ca.pak
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • cs.pak
  • d3dcompiler_47.dll
    .dll windows x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • da.pak
  • de.pak
  • el.pak
  • elevate.exe
    .exe windows x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • enGB.pak
  • enUS.pak
  • es.pak
  • es419.pak
  • et.pak
  • fa.pak
  • ffmpeg.dll
    .dll windows x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • fi.pak
  • fil.pak
  • fr.pak
  • gu.pak
  • he.pak
  • hi.pak
  • hr.pak
  • hrcomm.dll
    .dll windows x86

    ff994d27c9274656aea4d7b777044e80


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hu.pak
  • ico
  • icudtl.dat
  • id.pak
  • it.pak
  • ja.pak
  • jansson.dll
    .dll windows x86

    6352b05f36a3dbcf39d907d987aec925


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kn.pak
  • ko.pak
  • libEGL.dll
    .dll windows x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows x64

    7e67cb770e0040254310165a1b309202


    Headers

    Imports

    Exports

    Sections

  • libcobra.dll
    .dll windows x86

    c38afd1ee6d132d0fd60d0c1f4d96454


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcodecs.dll
    .dll windows x86

    957624f9857252eeec3df6f94b97f9dc


    Code Sign

    Headers

    Imports

    Sections

  • libxsse.dll
    .dll windows x86

    c1a77b6099db379d3f12d5329ceded1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • log.db
  • log.dbshm
  • log.dbwal
  • lt.pak
  • lv.pak
    .ps1
  • meiqia.exe
    .exe windows x86

    2adc47f22b0867d1cf1ac2122fff6302


    Code Sign

    Headers

    Imports

    Sections

  • ml.pak
  • mr.pak
  • ms.pak
  • msvcp120.dll
    .dll windows x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nb.pak
  • nl.pak
  • pl.pak
  • ptBR.pak
  • ptPT.pak
  • resources.pak
  • ro.pak
  • ru.pak
  • scenter.dll
    .dll windows x86

    6e5f40912c9e3fa8bbab6f176e68d0ee


    Code Sign

    Headers

    Imports

    Sections

  • sk.pak
  • sl.pak
    .ps1
  • snapshot_blob.bin
  • sqlite.dll
    .dll windows x86

    ed240468ea6db5274f2bb379c1fc6ca9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sr.pak
  • sv.pak
  • sw.pak
  • ta.pak
  • te.pak
  • th.pak
    .ps1
  • tr.pak
  • uactmon.dll
    .dll windows x86

    86e7eec1e15c4d784791412b483ec56e


    Code Sign

    Headers

    Imports

    Sections

  • uk.pak
  • ur.pak
  • usysdiag.dll
    .dll windows x86

    e17404561494c850a5ac4b53ea852723


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • vi.pak
  • vk_swiftshader.dll
    .dll windows x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan1.dll
    .dll windows x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • zhCN.pak
  • zhTW.pak