General

  • Target

    release.rar

  • Size

    5.3MB

  • MD5

    7db8f875bdcc4af4480ada2c4e1ade60

  • SHA1

    08e756b900e5da61d61060c3dd933e759002f8a7

  • SHA256

    1036ca544e9167793d8b2cf3a0279037229c4f2f1696cfdbb25a573df631fa8d

  • SHA512

    4e456b2fa8c5d0d3b93f900f3ee10a0dc1f4d811c48819bd44a5df3a17f3189a8cebe168bfb49776477e53741fb41616eb63d9b7116f1704d604314f7d43d616

  • SSDEEP

    98304:ElmivEeNMjwoagRWWe6oRWQamp23KfHBuKTHUcMnymrerc9fax+gyTL3fxy7Q:EzvEeGa2neVWQampKK/Bp7IymSr8yxf6

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • release.rar
    .rar

    Password: 1234

  • prom/ResIL.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1d22555c7b529c98f9c4fb5d9c935c0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    Password: 1234

    1ad120ee160d4b9ed8d5a300a2d0fd01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/lgc_api.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    853c230519f7c5c1434f6e1076b2eacb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    2f7e9adabb08f758ed1accf0b8136028


    Headers

    Imports

    Sections