file_release_4.rar
- SHA256 e3683f1a58054c1166a94d5758848ed053777c7dc575a7af69c938b39f204eb5
Overview
overview
10Static
static
3ICQLiteShell.dll
windows10-2004-x64
1ICQLiteShell.dll
windows10-2004-x64
1ICQLiteShell.dll
windows11-21h2-x64
1ICQRT.dll
windows10-2004-x64
3ICQRT.dll
windows10-2004-x64
3ICQRT.dll
windows11-21h2-x64
3Language/WinRar.exe
windows7-x64
1Language/WinRar.exe
windows10-2004-x64
1Language/WinRar.exe
windows11-21h2-x64
1LiteRes.dll
windows7-x64
1LiteRes.dll
windows10-2004-x64
1LiteRes.dll
windows11-21h2-x64
1LiteSkinUtils.dll
windows10-1703-x64
3LiteSkinUtils.dll
windows10-2004-x64
3LiteSkinUtils.dll
windows11-21h2-x64
3setup.exe
windows10-2004-x64
10setup.exe
windows10-2004-x64
10setup.exe
windows11-21h2-x64
10Static task
static1
Behavioral task
behavioral1
Sample
ICQLiteShell.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
ICQLiteShell.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
ICQLiteShell.dll
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
ICQRT.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
ICQRT.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral6
Sample
ICQRT.dll
Resource
win11-20240221-en
Behavioral task
behavioral7
Sample
Language/WinRar.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Language/WinRar.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Language/WinRar.exe
Resource
win11-20240221-en
Behavioral task
behavioral10
Sample
LiteRes.dll
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
LiteRes.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral12
Sample
LiteRes.dll
Resource
win11-20240221-en
Behavioral task
behavioral13
Sample
LiteSkinUtils.dll
Resource
win10-20240221-en
Behavioral task
behavioral14
Sample
LiteSkinUtils.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
LiteSkinUtils.dll
Resource
win11-20240221-en
Behavioral task
behavioral16
Sample
setup.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
setup.exe
Resource
win10v2004-20240221-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/ICQLiteShell.dll |
| unpack001/ICQRT.dll |
| unpack001/LiteRes.dll |
| unpack001/LiteSkinUtils.dll |
| unpack001/setup.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=2, id=37, version=8755,
count=3, id=28, version=9178,
count=14, id=25, version=9210,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=169, id=1, productName=Unmarked objects,
count=3, id=11, version=8966,
count=1, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=14, version=7299,
count=2, id=11, version=8047,
count=8, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=25, version=9210,
count=33, id=1, productName=Unmarked objects,
count=1, id=10, version=8966,
count=4, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8569,
count=11, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=2, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=3, id=11, version=8798,
count=2, id=37, version=8755,
count=1, id=28, version=9178,
count=14, id=25, version=9210,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=2, id=11, version=8569,
count=3, id=4, version=8569,
count=207, id=1, productName=Unmarked objects,
count=18, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.