Resubmissions

02-02-2024 19:12

240202-xwkpgadch8 10

01-02-2024 20:30

240201-zafjqsfhfk 10

01-02-2024 20:05

240201-yttd9sdee3 10

General

  • Target

    file_v_9.rar

  • Size

    6.6MB

  • MD5

    709dc9523c485bdba7b65944a010e56a

  • SHA1

    030f4e55a2e2a7d034915aa920221259b31d9985

  • SHA256

    afe2d9fd6e0dc6add700401243c0028d315b88f58ba9510a70e1359c0747aa43

  • SHA512

    1e636d47072ef920fcc99f4381b4d0331e0c74af5b7dab9f99bbacfc56ebaa803b4a66aac11d210092280d0b47f6b66aee6b4550ee971287ff1ad6577f86c846

  • SSDEEP

    196608:dFYwQPVA3CM66wL6aWRTWQ69GBD5t3tZMEP:PQdhaRTWQOG7fP

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file_v_9.rar
    .rar

    Password: 1234

  • prom/1.dllqw
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/ResIL.dlww
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1d22555c7b529c98f9c4fb5d9c935c0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/chrome_elf.dllqqq
    .dll windows:5 windows x64 arch:x64

    Password: 1234

    1ad120ee160d4b9ed8d5a300a2d0fd01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/dbghelp.dllew
    .dll windows:7 windows x86 arch:x86

    Password: 1234

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prom/lgc_api.dllw
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    853c230519f7c5c1434f6e1076b2eacb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    2f7e9adabb08f758ed1accf0b8136028


    Headers

    Imports

    Sections