General

  • Target

    release_v09.rar

  • Size

    6.5MB

  • MD5

    bdbba24cb6d8feea2ce3b0541bf996e7

  • SHA1

    b82c0b4c085b9041bbe1b1bbab73d5353518fbb2

  • SHA256

    073aa353fa9baaebed4e76c0520b16849cdef46f0d39410f701c401517b967ff

  • SHA512

    04ac5b198223dd2a9920b2e86ca2b6f3fa98e8ba37f8ef55153bf5e6dd7e424ae4e2568606413fb448e543131a523d9b0690df149355125c83b7b38461ab6560

  • SSDEEP

    98304:41gf+/rOSKSoTv4Dlt7LBbHJ/GU5EEp2mJ9KkgCwNk50iFqyJvnDmxG70XYWTLlO:46G/rOLS0ot/BMFEp2wKNanzWfZC

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • release_v09.rar
    .rar

    Password: 1234

  • prom/1.dllqw
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/123.dlww
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1d22555c7b529c98f9c4fb5d9c935c0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/ResIL.dlww
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1d22555c7b529c98f9c4fb5d9c935c0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/chrome_elf.dllqqq
    .dll windows:5 windows x64 arch:x64

    Password: 1234

    1ad120ee160d4b9ed8d5a300a2d0fd01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/dbghelp.dllew
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/lgc_api.dllw
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    853c230519f7c5c1434f6e1076b2eacb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    2f7e9adabb08f758ed1accf0b8136028


    Headers

    Imports

    Sections