General

  • Target

    Flight Client v4.zip

  • Size

    105.0MB

  • MD5

    7a835604d8e7629ca0ec6048167f4757

  • SHA1

    e48d4efec325c072369bd07ef44ce55ed88f9989

  • SHA256

    9d1e842f6c89f037db7b0887c6ca87f5bf7564f51e07835c7d5ec4d0af7acf84

  • SHA512

    7a9ea0dee0a72d2c2b46d43d3f96de1fad948a2f5cddbef71db35de03d6bd1c2ad1d3f17ed6838ae6895cfe246bd60414f5bdd71e70c5fd3c56c328aac017a48

  • SSDEEP

    1572864:KyDjdMqcytO5H9u+cXKq4aRDmkSECFsi73YxAP/s5w4Dw74UmPIlVuo+BpFEZTn6:KedA9l5mDSEw/DMeo64UZ+BHEpfONfQK

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • Flight Client v4.zip
    .zip
  • Flight Client v4/Flight Client v4-natives-1765707230700/OpenAL32.dll
    .dll windows:5 windows x86 arch:x86

    82d20d7e5aa7e0fb272540012328f63c


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/OpenAL64.dll
    .dll windows:5 windows x64 arch:x64

    633c2f0413d82c85233cd12dfd3f70d6


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/avutil-ttv-51.dll
    .dll windows:4 windows x64 arch:x64

    4dc08937485f626184527d93bc183565


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/jinput-dx8.dll
    .dll windows:5 windows x86 arch:x86

    8aec3cd2fb727c45df4ffd891336ebb6


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/jinput-dx8_64.dll
    .dll windows:5 windows x64 arch:x64

    775f39aab202a1f05940d27f0b92a7bd


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/jinput-raw.dll
    .dll windows:5 windows x86 arch:x86

    59077abdf502a0058489863f48dd1d26


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/jinput-raw_64.dll
    .dll windows:5 windows x64 arch:x64

    7197ad91906d99533954489f893101f1


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/jinput-wintab.dll
    .dll windows:5 windows x86 arch:x86

    43b2507faccc65369244b2bf3d687cad


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/libmfxsw64.dll
    .dll windows:5 windows x64 arch:x64

    ceb419a5aaa755241938db3b7db9fb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/libmp3lame-ttv.dll
    .dll windows:4 windows x64 arch:x64

    5f1bd526834d1e8cbe73b88cee3b59d4


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/lwjgl.dll
    .dll windows:5 windows x86 arch:x86

    7edf294504a49a32026d7f01e24e6450


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/lwjgl64.dll
    .dll windows:5 windows x64 arch:x64

    c82a02ad3db1bbcc897369a48967cd74


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/swresample-ttv-0.dll
    .dll windows:4 windows x64 arch:x64

    8d45758e9346a0ac450e56ddd43f3ff1


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-1765707230700/twitchsdk.dll
    .dll windows:6 windows x64 arch:x64

    c813548f6c4d8c3b6276ebe0cff2f454


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-378479202400/OpenAL64.dll
    .dll windows:5 windows x64 arch:x64

    633c2f0413d82c85233cd12dfd3f70d6


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4-natives-378479202400/lwjgl64.dll
    .dll windows:5 windows x64 arch:x64

    c82a02ad3db1bbcc897369a48967cd74


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/Flight Client v4.jar
    .jar
  • Flight Client v4/Flight Client v4.json
  • Flight Client v4/natives/OpenAL32.dll
    .dll windows:5 windows x86 arch:x86

    82d20d7e5aa7e0fb272540012328f63c


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/OpenAL64.dll
    .dll windows:5 windows x64 arch:x64

    633c2f0413d82c85233cd12dfd3f70d6


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/avutil-ttv-51.dll
    .dll windows:4 windows x64 arch:x64

    4dc08937485f626184527d93bc183565


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/jinput-dx8.dll
    .dll windows:5 windows x86 arch:x86

    8aec3cd2fb727c45df4ffd891336ebb6


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/jinput-dx8_64.dll
    .dll windows:5 windows x64 arch:x64

    775f39aab202a1f05940d27f0b92a7bd


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/jinput-raw.dll
    .dll windows:5 windows x86 arch:x86

    59077abdf502a0058489863f48dd1d26


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/jinput-raw_64.dll
    .dll windows:5 windows x64 arch:x64

    7197ad91906d99533954489f893101f1


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/jinput-wintab.dll
    .dll windows:5 windows x86 arch:x86

    43b2507faccc65369244b2bf3d687cad


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/libmfxsw64.dll
    .dll windows:5 windows x64 arch:x64

    ceb419a5aaa755241938db3b7db9fb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/libmp3lame-ttv.dll
    .dll windows:4 windows x64 arch:x64

    5f1bd526834d1e8cbe73b88cee3b59d4


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/lwjgl.dll
    .dll windows:5 windows x86 arch:x86

    7edf294504a49a32026d7f01e24e6450


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/lwjgl64.dll
    .dll windows:5 windows x64 arch:x64

    c82a02ad3db1bbcc897369a48967cd74


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/swresample-ttv-0.dll
    .dll windows:4 windows x64 arch:x64

    8d45758e9346a0ac450e56ddd43f3ff1


    Headers

    Imports

    Exports

    Sections

  • Flight Client v4/natives/twitchsdk.dll
    .dll windows:6 windows x64 arch:x64

    c813548f6c4d8c3b6276ebe0cff2f454


    Headers

    Imports

    Exports

    Sections