General

  • Target

    Use_2023_To_Open.rar

  • Size

    30.5MB

  • MD5

    e1e371673d2b93b782d6e854904e1f14

  • SHA1

    88cd12858d9b3fd49a05deed285d168505557ae6

  • SHA256

    cdd5cf2f45a2ba1e145ccb3873fe8fc37301a624bd3fa913af1de5682c9005a3

  • SHA512

    517f287b7ebf403452d5a62c258cf9716936d1bea2a4777478322e7ddb6f985ba0f6cf231a3fcb622060ff80ac6e3b142a80a7d137b75c88b4847e7aefc3110d

  • SSDEEP

    786432:7ppk2gOYXTYLZsTq0vS1uKel1OKuwu0qr4yuH9brmB7uo/jTxV/H:f7Ycdn0pV/qr4fsuo/jTxV/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Use_2023_To_Open.rar
    .rar
  • ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 2023

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/ba.txt
  • Language/be.txt
  • Language/bg.txt
  • Language/bn.txt
  • Language/ca.txt
  • Language/co.txt
  • Language/cs.txt
  • Language/da.txt
  • Language/de.txt
  • Language/el.txt
  • Language/eng.txt
  • Language/es.txt
  • Language/et.txt
  • Language/eu.txt
  • Language/ext.txt
  • Language/fa.txt
  • Language/fi.txt
  • Language/fr.txt
  • Language/fur.txt
  • Language/fy.txt
  • Language/ga.txt
  • Language/gl.txt
  • Language/gu.txt
  • Language/he.pak
  • Language/he.txt
  • Language/hi.pak
  • Language/hi.txt
  • Language/hr.pak
  • Language/hr.txt
  • Language/hu.pak
  • Language/hu.txt
  • Language/hy.txt
  • Language/id.txt
  • Language/is.txt
  • Language/it.txt
  • Language/ja.txt
  • Language/ka.txt
  • Language/kaa.txt
  • Language/kab.txt
  • Language/kk.txt
  • Language/ko.txt
  • Language/ku-ckb.txt
  • Language/ky.txt
  • Language/lij.txt
  • Language/lt.txt
  • Language/mk.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • Password for archive 2023
  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/Locals/am.pak
  • Resource/Locals/ar.pak
  • Resource/Locals/fi.pak
  • Resource/Locals/fil.pak
  • Resource/Locals/fr.pak
  • Resource/Locals/gu.pak
  • Resource/Locals/he.pak
  • Resource/Locals/hi.pak
  • Resource/Locals/hr.pak
  • Resource/Locals/hu.pak
  • Resource/Locals/id.pak
  • Resource/Locals/lt.pak
  • Resource/Locals/lv.pak
  • Resource/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • Resource/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.xml
    .xml
  • Resource/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2023

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • Resource/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/opengl64.dll
  • setup_win64_86.exe
    .exe windows:6 windows x86 arch:x86

    9b6f3f808f78d81fe0f909afd50d547c


    Headers

    Imports

    Sections