General

  • Target

    file.rar

  • Size

    33.0MB

  • MD5

    aae2198be996484cfa36727648b023a9

  • SHA1

    8239e0afd59d3cb859a9d2e8a9ed8ee8fdcec383

  • SHA256

    0d07d6e73956e6ecbe00ab15b69ca8962f977dd91373f424527c03737b3e4223

  • SHA512

    b2dca155fa328dbe53ec98b7c0915dc6cbd0c147ff567569d3b45f9ed741ff948901770d3854128a956ede5c04397e14d9e2d3f8e760fddd2dd971eb76d0992b

  • SSDEEP

    786432:KcRHf/0ZUzoWK/N51RjwzSIEf7hchFZown8mopOmVlsrBjp:KAHf/uUTzPEf6Fe+/opOmorT

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.rar
    .rar

    Password: 1234

  • PROPAMAT/cohtml.WindowsDesktop.dll
    .dll windows:6 windows x86

    Password: 1234

    336c3362914e8c44b8636e5283e59277


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PROPAMAT/er.dlre
    .dll windows:5 windows x86

    Password: 1234

    96de6114b3e9e37048d4dbc95f2c53ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PROPAMAT/lgc_api.dll
    .dll windows:6 windows x86

    Password: 1234

    098d9da01bf31c47c55b1f232fc293c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PROPAMAT/libGLESv2.dll
    .dll windows:5 windows x86

    Password: 1234

    3ae3956ab1353e92ed1a21ca2229382b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PROPAMAT/vivoxsdk.dll
    .dll windows:6 windows x86

    Password: 1234

    efaa61aec68c12fcf59804931c998357


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/1.dat
  • Templates/2.dat
  • Templates/3.dat
  • Templates/4.dat
  • Templates/5.dat
  • Templates/6.dat
  • setup.exe
    .exe windows:6 windows x64

    Password: 1234

    28cc55450edf4eab5f9510f1b709a4a8


    Headers

    Imports

    Sections