General

  • Target

    project-github-1.7.1.rar

  • Size

    1.7MB

  • MD5

    d493dfa8d86809e473a7c2b8e9947593

  • SHA1

    6f6788f022e388d203b591b59d0a69a70270eddb

  • SHA256

    bb12cd2040ed0f6a34834bd46e19ea2e0cb6728764c295d9cb14bc075f544af0

  • SHA512

    e7f9da3284df0f014be39e160424cd229b1f34c635d877dcc7430bd43700eb88183b11507aba69eba01e2a048dbe97e78470a6db14d01f02b13a9f3febdc34e0

  • SSDEEP

    49152:L7yO/N0AWEqz9D7qdwq34+sqSp/A2oqSF4HmU7haVk:L7y4N9W/ZCwqde6VZU7hH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • project-github-1.7.1.rar
    .rar

    Password: 2024

  • Locales/LICENSE
  • Locales/LICENSE-modules
  • Locales/VCOMP140.DLL
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    ac995a4234af47b65b9426030b72051f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024


    Code Sign

    Headers

    Exports

    Sections

  • Locales/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024


    Code Sign

    Headers

    Exports

    Sections

  • Locales/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    981aec9fb8f0de85c6dd782a5599a8e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/samples_0003_d2.json
  • Locales/samples_0003_o2.json
  • Locales/samples_0003_t2.json
  • Locales/select.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    c3e260383b87773b30d9c7e5aa6d076b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/snapshot_blob.bin
  • Locales/start_http.bat
  • Locales/start_https.bat
  • Locales/stored_setting.json
  • Locales/ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    ea4d5e085d5bbdbd19dcce14d926b29e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    0c1227ef9e5248d56560b944d04025cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/v8_context_snapshot.bin
  • Locales/vcclient.log
  • Locales/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Locales/version
  • Locales/vk_swiftshader_icd.json
  • Locales/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • github_project_v.1.7.2_setup.exe
    .exe windows:5 windows x86 arch:x86

    06eb4d13e1bb2dcafbe526f4a64db1ae


    Code Sign

    Headers

    Imports

    Exports

    Sections