Overview

overview

3

Static

static

3

WinRAR4/Default.exe

windows7-x64

1

WinRAR4/Default.exe

windows10-2004-x64

1

WinRAR4/Fo...7z.dll

windows7-x64

1

WinRAR4/Fo...7z.dll

windows10-2004-x64

3

WinRAR4/Fo...xa.dll

windows7-x64

1

WinRAR4/Fo...xa.dll

windows10-2004-x64

1

WinRAR4/Fo...V2.dll

windows7-x64

1

WinRAR4/Fo...V2.dll

windows10-2004-x64

3

WinRAR4/Fo...ce.dll

windows7-x64

3

WinRAR4/Fo...ce.dll

windows10-2004-x64

3

WinRAR4/Fo...rj.dll

windows7-x64

3

WinRAR4/Fo...rj.dll

windows10-2004-x64

3

WinRAR4/Fo...z2.dll

windows7-x64

1

WinRAR4/Fo...z2.dll

windows10-2004-x64

3

WinRAR4/Fo...ab.dll

windows7-x64

1

WinRAR4/Fo...ab.dll

windows10-2004-x64

3

WinRAR4/Fo...gz.dll

windows7-x64

1

WinRAR4/Fo...gz.dll

windows10-2004-x64

3

WinRAR4/Fo...so.dll

windows7-x64

3

WinRAR4/Fo...so.dll

windows10-2004-x64

3

WinRAR4/Fo...zh.dll

windows7-x64

3

WinRAR4/Fo...zh.dll

windows10-2004-x64

3

WinRAR4/Fo...ar.dll

windows7-x64

3

WinRAR4/Fo...ar.dll

windows10-2004-x64

3

WinRAR4/Fo...ue.dll

windows7-x64

3

WinRAR4/Fo...ue.dll

windows10-2004-x64

3

WinRAR4/Formats/z.dll

windows7-x64

3

WinRAR4/Formats/z.dll

windows10-2004-x64

3

WinRAR4/Rar.exe

windows7-x64

3

WinRAR4/Rar.exe

windows10-2004-x64

3

WinRAR4/RarExt.dll

windows7-x64

1

WinRAR4/RarExt.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    971df722255c8311f6883b562a45e0ab

  • Size

    1.9MB

  • MD5

    971df722255c8311f6883b562a45e0ab

  • SHA1

    543f2502dccf56ef99048b1ce988f7e97cfce158

  • SHA256

    8f951003824602cacdbb351c35c11e6a5dd82945b4ea705390f2942e9bbf6521

  • SHA512

    d6b04d3969079b3dc359127a7c09eddd083e47a1992cf81063abf50a5e57bafda6dac5e4234c875b43320b9066f1bcfce699e7ae96be38a12d62081ff9a8606f

  • SSDEEP

    49152:n2G2G5BHY4LCLN9aGk5xoZEwJbik30vnQ4MJ9p2jem2j/:2HGDv2RSxoZZJb70vnQjJ9Vm2j/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 971df722255c8311f6883b562a45e0ab
    .rar
  • WinRAR4/Default.SFX
    .exe windows:5 windows x86 arch:x86

    93ff054b805e17efd7f7ae1730680391


    Headers

    Imports

    Sections

  • WinRAR4/Descript.ion
  • WinRAR4/Formats/7z.fmt
    .dll windows:5 windows x86 arch:x86

    810ff85253ea0da9e4270285b177dcc2


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    961ffb8f71d3099e6afd08b41dae82e3


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/ace.fmt
    .dll windows:5 windows x86 arch:x86

    03ee27585fbe4280f8bce8f0a2a3c262


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/arj.fmt
    .dll windows:5 windows x86 arch:x86

    1e364ee23def5d605ef85e53a4bded2d


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/bz2.fmt
    .dll windows:5 windows x86 arch:x86

    a571b72321514a15e5ef913d5ddebafb


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/cab.fmt
    .dll windows:5 windows x86 arch:x86

    18a24461d3867eae573f22f70e5bc4cd


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/gz.fmt
    .dll windows:5 windows x86 arch:x86

    a5558bec30dbda6969f609ece32f46dc


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/iso.fmt
    .dll windows:5 windows x86 arch:x86

    abfb7f92f2f56435c1982b30abece301


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/lzh.fmt
    .dll windows:5 windows x86 arch:x86

    d1fafdeb635fd965ec8877edeb363ff6


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/tar.fmt
    .dll windows:5 windows x86 arch:x86

    5cba4bbbe1a10a51c0adbfce2eea3e54


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/uue.fmt
    .dll windows:5 windows x86 arch:x86

    92d227f3b96bb1ef31d08aaeb66b079a


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/Formats/z.fmt
    .dll windows:5 windows x86 arch:x86

    690706108c4d5618e6012f84061ddfa3


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/License.txt
  • WinRAR4/Package.ini
  • WinRAR4/Rar.exe
    .exe windows:5 windows x86 arch:x86

    434e8913d710f61d1d0d6dfce78e8d29


    Headers

    Imports

    Sections

  • WinRAR4/RarExt.dll
    .dll windows:5 windows x86 arch:x86

    fe39fa4b802fa06aa43e7bcb72864ddf


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/RarExt64.dll
    .dll windows:5 windows x64 arch:x64

    1ccfd7c74c5ad23c47d3bc22e4fe0e3e


    Headers

    Imports

    Exports

    Sections

  • WinRAR4/RarFiles.lst
  • WinRAR4/UnRAR.exe
    .exe windows:5 windows x86 arch:x86

    1da1fb3d1356bfe063e7074a84c82ba0


    Headers

    Imports

    Sections

  • WinRAR4/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    0ddc44c438bfbed8290d1c2d60e4751a


    Headers

    Imports

    Sections

  • WinRAR4/Uninstall.lst
  • WinRAR4/WinCon.SFX
    .exe windows:5 windows x86 arch:x86

    d664338ea009589942dd6aacfe0873b1


    Headers

    Imports

    Sections

  • WinRAR4/WinRAR.chm
    .chm
  • WinRAR4/WinRAR.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • WinRAR4/Zip.SFX
    .exe windows:5 windows x86 arch:x86

    ececc473fe0400492818c3054a72770e


    Headers

    Imports

    Sections

  • WinRAR4/rarnew.dat
    .rar
  • WinRAR4/rarreg.key
  • WinRAR4/zipnew.dat
  • WinRAR4/软件简介.txt