General

  • Target

    release.rar

  • Size

    6.4MB

  • MD5

    ff23f4b0ab06c6dcde71abffcd796cb9

  • SHA1

    012a8bbd38b3666b9562dd4cd75d14bb3eadbf1e

  • SHA256

    52c071349a51f000c446acb9ba38194449a455ba3cff5be290ba336dab1176fd

  • SHA512

    4111c1ff267d0435578dc8e908524986cb59e6617880423391fb02c388fc648510980ff734f22132c3c26e5dd5850aaf6b93bee0e8066970094b3323d17a3494

  • SSDEEP

    98304:VoakuGJeIadZmgeXIWtsRKDaBC5Y6rVvlM+tPZzw8MSzqvR6J5LCJ9kBs3iKsDOS:VoUGgCRaRY88BVtMI6S+MPLDeS

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • release.rar
    .rar

    Password: 1234

  • 7z.msi
    .msi
  • prom/ResIL.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1d22555c7b529c98f9c4fb5d9c935c0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    Password: 1234

    1ad120ee160d4b9ed8d5a300a2d0fd01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/lgc_api.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    853c230519f7c5c1434f6e1076b2eacb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234


    Headers

    Sections