Resubmissions

09/10/2023, 00:09

231009-afpl6aba93 3

General

  • Target

    Install.zip

  • Size

    11.7MB

  • MD5

    9fe996f91fee24ade8011c3f77ae58c5

  • SHA1

    f8fd2362a62b347fe16de9cb94ccd2ef3d35a3ff

  • SHA256

    0c504d687931e296c38d23a10b2fd39f57842b02d93795702bb6b4cdc8edb575

  • SHA512

    56d9d7e588fd846445819db2948f22f49c674feef7d635fe363adda3716c5ec3864f6eea1a0ac23acc05699dc0bfc28c18adc03a3f049eed56167b12482f344f

  • SSDEEP

    196608:aqz/k0WJ/ShpwSg3ChhfTBmttuhcjIAQGVeb3AyYQ8TxiJAS/Apw+:aqz/kZJ/IpwSgY0tgOjhVE3A1Q8TYOSk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Install.zip
    .zip
  • Install/Install.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Install/Settings/.pak
  • Install/Settings/2.pak
  • Install/Settings/Data
  • Install/Settings/library.dll
  • Install/Settings/opengl.sys
  • Install/Settings/opengl64.dll
  • Install/locales/Lang/en-US/ActiveXInstallService.adml
    .xml
  • Install/locales/Lang/en-US/AddRemovePrograms.adml
    .xml
  • Install/locales/Lang/en-US/AppCompat.adml
    .xml
  • Install/locales/Lang/en-US/AppXRuntime.adml
    .xml
  • Install/locales/Lang/en-US/AppxPackageManager.adml
    .xml
  • Install/locales/Lang/en-US/AttachmentManager.adml
    .xml
  • Install/locales/Lang/en-US/AuditSettings.adml
    .xml
  • Install/locales/Lang/en-US/AutoPlay.adml
    .xml
  • Install/locales/Lang/en-US/Biometrics.adml
    .xml
  • Install/locales/Lang/en-US/Bits.adml
    .xml
  • Install/locales/Lang/en-US/CEIPEnable.adml
    .xml
  • Install/locales/Lang/en-US/COM.adml
    .xml
  • Install/locales/Lang/en-US/CipherSuiteOrder.adml
    .xml
  • Install/locales/Lang/en-US/Conf.adml
    .xml
  • Install/locales/Lang/en-US/ControlPanel.adml
    .xml
  • Install/locales/Lang/en-US/ControlPanelDisplay.adml
    .xml
  • Install/locales/Lang/en-US/Cpls.adml
    .xml
  • Install/locales/Lang/en-US/CredSsp.adml
    .xml
  • Install/locales/Lang/en-US/CredUI.adml
    .xml
  • Install/locales/Lang/en-US/CredentialProviders.adml
    .xml
  • Install/locales/Lang/en-US/CtrlAltDel.adml
    .xml
  • Install/locales/Lang/en-US/DCOM.adml
    .xml
  • Install/locales/Lang/en-US/DFS.adml
    .xml
  • Install/locales/Lang/en-US/DWM.adml
    .xml
  • Install/locales/Lang/en-US/Desktop.adml
    .xml
  • Install/locales/Lang/en-US/DeviceCompat.adml
    .xml
  • Install/locales/Lang/en-US/DeviceInstallation.adml
    .xml
  • Install/locales/Lang/en-US/DeviceSetup.adml
    .xml
  • Install/locales/Lang/en-US/DigitalLocker.adml
    .xml
  • Install/locales/Lang/en-US/DiskDiagnostic.adml
    .xml
  • Install/locales/Lang/en-US/DiskNVCache.adml
    .xml
  • Install/locales/Lang/en-US/DiskQuota.adml
    .xml
  • Install/locales/Lang/en-US/DistributedLinkTracking.adml
    .xml
  • Install/locales/Lang/en-US/DnsClient.adml
    .xml
  • Install/locales/Lang/en-US/EAIME.adml
    .xml
  • Install/locales/Lang/en-US/EarlyLaunchAM.adml
  • Install/locales/Lang/en-US/EdgeUI.adml
    .xml
  • Install/locales/Lang/en-US/EncryptFilesonMove.adml
    .xml
  • Install/locales/Lang/en-US/ErrorReporting.adml
    .xml
  • Install/locales/Lang/en-US/EventForwarding.adml
    .xml
  • Install/locales/Lang/en-US/EventLog.adml
    .xml
  • Install/locales/Lang/en-US/EventViewer.adml
    .xml
  • Install/locales/Lang/en-US/Explorer.adml
    .xml
  • Install/locales/Lang/en-US/ExternalBoot.adml
    .xml
  • Install/locales/Lang/en-US/FileHistory.adml
    .xml
  • Install/locales/Lang/en-US/FileRecovery.adml
    .xml
  • Install/locales/Lang/en-US/FileRevocation.adml
    .xml
  • Install/locales/Lang/en-US/FileServerVSSProvider.adml
    .xml
  • Install/locales/Lang/en-US/FileSys.adml
    .xml
  • Install/locales/Lang/en-US/FolderRedirection.adml
    .xml
  • Install/locales/Lang/en-US/FramePanes.adml
    .xml
  • Install/locales/Lang/en-US/GameExplorer.adml
    .xml
  • Install/locales/Lang/en-US/Globalization.adml
    .xml
  • Install/locales/Lang/en-US/GroupPolicy-Server.adml
    .xml
  • Install/locales/Lang/en-US/GroupPolicy.adml
    .xml
  • Install/locales/Lang/en-US/GroupPolicyPreferences.adml
    .xml
  • Install/locales/Lang/en-US/Help.adml
    .xml
  • Install/locales/Lang/en-US/HelpAndSupport.adml
    .xml
  • Install/locales/Lang/en-US/ICM.adml
    .xml
  • Install/locales/Lang/en-US/IIS.adml
    .xml
  • Install/locales/Lang/en-US/InetRes.adml
    .xml
  • Install/locales/Lang/en-US/InkWatson.adml
    .xml
  • Install/locales/Lang/en-US/KDC.adml
    .xml
  • Install/locales/Lang/en-US/Kerberos.adml
    .xml
  • Install/locales/Lang/en-US/LanmanServer.adml
    .xml
  • Install/locales/Lang/en-US/LeakDiagnostic.adml
    .xml
  • Install/locales/Lang/en-US/LinkLayerTopologyDiscovery.adml
    .xml
  • Install/locales/Lang/en-US/LocationProviderAdm.adml
    .xml
  • Install/locales/Lang/en-US/Logon.adml
    .xml
  • Install/locales/Lang/en-US/MMC.adml
    .xml
  • Install/locales/Lang/en-US/MMCSnapIns2.adml
    .xml
  • Install/locales/Lang/en-US/MMCSnapins.adml
    .xml
  • Install/locales/Lang/en-US/MSDT.adml
    .xml
  • Install/locales/Lang/en-US/MSI.adml
    .xml
  • Install/locales/Lang/en-US/MediaCenter.adml
    .xml
  • Install/locales/Lang/en-US/MobilePCMobilityCenter.adml
    .xml
  • Install/locales/Lang/en-US/MobilePCPresentationSettings.adml
    .xml
  • Install/locales/Lang/en-US/Msi-FileRecovery.adml
    .xml
  • Install/locales/Lang/en-US/NAPXPQec.adml
    .xml
  • Install/locales/Lang/en-US/NCSI.adml
    .xml
  • Install/locales/Lang/en-US/Netlogon.adml
    .xml
  • Install/locales/Lang/en-US/NetworkConnections.adml
    .xml
  • Install/locales/Lang/en-US/NetworkIsolation.adml
  • Install/locales/Lang/en-US/NetworkProjection.adml
    .xml
  • Install/locales/Lang/en-US/OfflineFiles.adml
    .xml
  • Install/locales/Lang/en-US/P2P-pnrp.adml
    .xml
  • Install/locales/Lang/en-US/ParentalControls.adml
    .xml
  • Install/locales/Lang/en-US/PeerToPeerCaching.adml
    .xml
  • Install/locales/Lang/en-US/PenTraining.adml
    .xml
  • Install/locales/Lang/en-US/PerformanceDiagnostics.adml
    .xml
  • Install/locales/Lang/en-US/PerformancePerftrack.adml
    .xml
  • Install/locales/Lang/en-US/Power.adml
    .xml
  • Install/locales/Lang/en-US/PowerShellExecutionPolicy.adml
    .xml
  • Install/locales/Lang/en-US/PreviousVersions.adml
    .xml
  • Install/locales/Lang/en-US/Printing.adml
    .xml
  • Install/locales/Lang/en-US/Printing2.adml
    .xml
  • Install/locales/Lang/en-US/Programs.adml
    .xml
  • Install/locales/Lang/en-US/PswdSync.adml
    .xml
  • Install/locales/Lang/en-US/QOS.adml
    .xml
  • Install/locales/Lang/en-US/RPC.adml
    .xml
  • Install/locales/Lang/en-US/RacWmiProv.adml
    .xml
  • Install/locales/Lang/en-US/Radar.adml
    .xml
  • Install/locales/Lang/en-US/ReAgent.adml
    .xml
  • Install/locales/Lang/en-US/Reliability.adml
    .xml
  • Install/locales/Lang/en-US/RemoteAssistance.adml
    .xml
  • Install/locales/Lang/en-US/RemovableStorage.adml
    .xml
  • Install/locales/Lang/en-US/Scripts.adml
    .xml
  • Install/locales/Lang/en-US/Securitycenter.adml
    .xml
  • Install/locales/Lang/en-US/Sensors.adml
    .xml
  • Install/locales/Lang/en-US/ServerManager.adml
    .xml
  • Install/locales/Lang/en-US/Servicing.adml
    .xml
  • Install/locales/Lang/en-US/SettingSync.adml
    .xml
  • Install/locales/Lang/en-US/Setup.adml
    .xml
  • Install/locales/Lang/en-US/SharedFolders.adml
    .xml
  • Install/locales/Lang/en-US/Sharing.adml
    .xml
  • Install/locales/Lang/en-US/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • Install/locales/Lang/en-US/ShellWelcomeCenter.adml
    .xml
  • Install/locales/Lang/en-US/Sidebar.adml
    .xml
  • Install/locales/Lang/en-US/SkyDrive.adml
    .xml
  • Install/locales/Lang/en-US/Smartcard.adml
    .xml
  • Install/locales/Lang/en-US/Snis.adml
    .xml
  • Install/locales/Lang/en-US/Snmp.adml
    .xml
  • Install/locales/Lang/en-US/SoundRec.adml
    .xml
  • Install/locales/Lang/en-US/StartMenu.adml
    .xml
  • Install/locales/Lang/en-US/SystemRestore.adml
    .xml
  • Install/locales/Lang/en-US/TPM.adml
    .xml
  • Install/locales/Lang/en-US/TabletPCInputPanel.adml
    .xml
  • Install/locales/Lang/en-US/TabletShell.adml
    .xml
  • Install/locales/Lang/en-US/TaskScheduler.adml
    .xml
  • Install/locales/Lang/en-US/Taskbar.adml
    .xml
  • Install/locales/Lang/en-US/TerminalServer-Server.adml
    .xml
  • Install/locales/Lang/en-US/TerminalServer.adml
    .xml
  • Install/locales/Lang/en-US/Thumbnails.adml
    .xml
  • Install/locales/Lang/en-US/TouchInput.adml
    .xml
  • Install/locales/Lang/en-US/UserProfiles.adml
    .xml
  • Install/locales/Lang/en-US/VolumeEncryption.adml
    .xml
  • Install/locales/Lang/en-US/W32Time.adml
    .xml
  • Install/locales/Lang/en-US/WCM.adml
    .xml
  • Install/locales/Lang/en-US/WDI.adml
    .xml
  • Install/locales/Lang/en-US/WPN.adml
    .xml
  • Install/locales/Lang/en-US/WinCal.adml
    .xml
  • Install/locales/Lang/en-US/WinInit.adml
    .xml
  • Install/locales/Lang/en-US/WinLogon.adml
    .xml
  • Install/locales/Lang/en-US/Windows.adml
    .xml
  • Install/locales/Lang/en-US/WindowsAnytimeUpgrade.adml
    .xml
  • Install/locales/Lang/en-US/WindowsBackup.adml
    .xml
  • Install/locales/Lang/en-US/WindowsColorSystem.adml
    .xml
  • Install/locales/Lang/en-US/WindowsConnectNow.adml
    .xml
  • Install/locales/Lang/en-US/WindowsDefender.adml
  • Install/locales/Lang/en-US/WindowsExplorer.adml
    .xml
  • Install/locales/Lang/en-US/WindowsFileProtection.adml
    .xml
  • Install/locales/Lang/en-US/WindowsFirewall.adml
    .xml
  • Install/locales/Lang/en-US/WindowsMail.adml
    .xml
  • Install/locales/Lang/en-US/WindowsMediaDRM.adml
    .xml
  • Install/locales/Lang/en-US/WindowsMediaPlayer.adml
    .xml
  • Install/locales/Lang/en-US/WindowsMessenger.adml
    .xml
  • Install/locales/Lang/en-US/WindowsProducts.adml
    .xml
  • Install/locales/Lang/en-US/WindowsRemoteManagement.adml
    .xml
  • Install/locales/Lang/en-US/WindowsRemoteShell.adml
    .xml
  • Install/locales/Lang/en-US/WindowsServer.adml
    .xml
  • Install/locales/Lang/en-US/WindowsUpdate.adml
    .xml
  • Install/locales/Lang/en-US/Winsrv.adml
    .xml
  • Install/locales/Lang/en-US/WordWheel.adml
    .xml
  • Install/locales/Lang/en-US/WorkFolders-Client.adml
    .xml
  • Install/locales/Lang/en-US/WorkplaceJoin.adml
    .xml
  • Install/locales/Lang/en-US/fthsvc.adml
    .xml
  • Install/locales/Lang/en-US/hotspotauth.adml
    .xml
  • Install/locales/Lang/en-US/iSCSI.adml
    .xml
  • Install/locales/Lang/en-US/msched.adml
    .xml
  • Install/locales/Lang/en-US/nca.adml
  • Install/locales/Lang/en-US/pca.adml
    .xml
  • Install/locales/Lang/en-US/sdiageng.adml
    .xml
  • Install/locales/Lang/en-US/srm-fci.adml
    .xml
  • Install/locales/Lang/en-US/tcpip.adml
    .xml
  • Install/locales/Lang/en-US/wlansvc.adml
    .xml
  • Install/locales/Lang/en-US/wwansvc.adml
    .xml
  • Install/locales/Lang/lang-1049.dll
    .dll windows:6 windows x86


    Code Sign

    Headers

    Sections

  • Install/locales/Lang/lang-1058.dll
    .dll windows:6 windows x86


    Code Sign

    Headers

    Sections

  • Install/locales/af.pak
  • Install/locales/am.pak
  • Install/locales/ar.pak
  • Install/locales/bg.pak
  • Install/locales/bn.pak
  • Install/locales/ca.pak
  • Install/locales/cs.pak
  • Install/locales/da.pak
  • Install/locales/de.pak
    .ps1
  • Install/locales/el.pak
  • Install/locales/en-GB.pak
  • Install/locales/en-US.pak
  • Install/locales/es-419.pak
  • Install/locales/es.pak
  • Install/locales/et.pak
  • Install/locales/fa.pak
  • Install/locales/fi.pak
  • Install/locales/fil.pak
  • Install/locales/fr.pak
  • Install/locales/gu.pak
  • Install/locales/he.pak
  • Install/locales/hi.pak
  • Install/locales/hr.pak
  • Install/locales/hu.pak
  • Install/locales/id.pak
  • Install/locales/it.pak
  • Install/locales/ja.pak
  • Install/locales/kn.pak
  • Install/locales/ko.pak
  • Install/locales/lt.pak
  • Install/locales/lv.pak
  • Install/locales/ml.pak
  • Install/locales/mr.pak
  • Install/locales/ms.pak
  • Install/locales/nb.pak
    .ps1
  • Install/locales/nl.pak
  • Install/locales/pl.pak
  • Install/locales/pt-BR.pak
  • Install/locales/pt-PT.pak
  • Install/locales/resources/app.asar.unpacked/build/notificationstate.node
    .dll windows:6 windows x64

    74d6de913c9714a3ae24ac600a02885f


    Headers

    Imports

    Exports

    Sections

  • Install/locales/resources/app.asar.unpacked/keytar.node
    .dll windows:6 windows x64

    6fd212f15ec4c89547b9c8fec6f747ab


    Headers

    Imports

    Exports

    Sections

  • Install/locales/resources/app.asar.unpacked/native/tvdbridge.node
    .dll windows:6 windows x64

    a7b82116ede5ae3fe54bd5fef2dc85c8


    Headers

    Imports

    Exports

    Sections

  • Install/locales/ro.pak
  • Install/locales/ru.pak
  • Install/locales/sk.pak
  • Install/locales/sl.pak
  • Install/locales/sr.pak
  • Install/locales/sv.pak
  • Install/locales/sw.pak
  • Install/locales/ta.pak
  • Install/locales/te.pak
  • Install/locales/th.pak
  • Install/locales/tr.pak
  • Install/locales/uk.pak
  • Install/locales/ur.pak
    .ps1
  • Install/locales/vi.pak
  • Install/locales/zh-CN.pak
  • Install/locales/zh-TW.pak
  • Install/mozglue.dll
    .dll windows:6 windows x86

    c713bf0db98003111b03a1ee75c33ba6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Install/msvcp140.dll
    .dll windows:6 windows x86

    f593ff04f9974b184d6ead7e4e3e6cf5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Install/orgeat.ogg
    .png
  • Install/vcruntime140.dll
    .dll windows:6 windows x86

    2262054530b5f8bbeb0c4e3a111a37eb


    Code Sign

    Headers

    Imports

    Exports

    Sections