file_release2.rar
- SHA256 a08d4e4070e87af3445d6a9c486905cef55cb76aa7ceb491e5f3d9fa9dc0ecf8
Overview
overview
10Static
static
3ICQLiteShell.dll
windows10-1703-x64
1ICQRT.dll
windows10-1703-x64
3Language/WinRar.exe
windows10-1703-x64
1LiteRes.dll
windows10-1703-x64
1LiteSkinUtils.dll
windows10-1703-x64
3Resource/L...me.dll
windows10-1703-x64
1Resource/L...UI.dll
windows10-1703-x64
1Resource/L...op.dll
windows10-1703-x64
1Resource/L...to.dll
windows10-1703-x64
1Resource/L...op.dll
windows10-1703-x64
1Resource/opengl64.dll
windows10-1703-x64
1setup.exe
windows10-1703-x64
10Static task
static1
Behavioral task
behavioral1
Sample
ICQLiteShell.dll
Resource
win10-20240221-en
Behavioral task
behavioral2
Sample
ICQRT.dll
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
Language/WinRar.exe
Resource
win10-20240221-en
Behavioral task
behavioral4
Sample
LiteRes.dll
Resource
win10-20240221-en
Behavioral task
behavioral5
Sample
LiteSkinUtils.dll
Resource
win10-20240221-en
Behavioral task
behavioral6
Sample
Resource/Locals/x64/AdonisUI.ClassicTheme.dll
Resource
win10-20240221-en
Behavioral task
behavioral7
Sample
Resource/Locals/x64/AdonisUI.dll
Resource
win10-20240221-en
Behavioral task
behavioral8
Sample
Resource/Locals/x64/SQLite.Interop.dll
Resource
win10-20240221-en
Behavioral task
behavioral9
Sample
Resource/Locals/x86/BouncyCastle.Crypto.dll
Resource
win10-20240221-en
Behavioral task
behavioral10
Sample
Resource/Locals/x86/SQLite.Interop.dll
Resource
win10-20240221-en
Behavioral task
behavioral11
Sample
Resource/opengl64.dll
Resource
win10-20240221-en
Behavioral task
behavioral12
Sample
setup.exe
Resource
win10-20240221-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/ICQLiteShell.dll |
| unpack001/ICQRT.dll |
| unpack001/LiteRes.dll |
| unpack001/LiteSkinUtils.dll |
| unpack001/Resource/Locals/x64/AdonisUI.ClassicTheme.dll |
| unpack001/Resource/Locals/x64/AdonisUI.dll |
| unpack001/setup.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=2, id=37, version=8755,
count=3, id=28, version=9178,
count=14, id=25, version=9210,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=169, id=1, productName=Unmarked objects,
count=3, id=11, version=8966,
count=1, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=14, version=7299,
count=2, id=11, version=8047,
count=8, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=25, version=9210,
count=33, id=1, productName=Unmarked objects,
count=1, id=10, version=8966,
count=4, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8569,
count=11, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=2, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=3, id=11, version=8798,
count=2, id=37, version=8755,
count=1, id=28, version=9178,
count=14, id=25, version=9210,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=2, id=11, version=8569,
count=3, id=4, version=8569,
count=207, id=1, productName=Unmarked objects,
count=18, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=20, id=241, version=40116,
count=128, id=243, version=40116,
count=37, id=242, version=40116,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=153, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Oct 19, 2021
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=49, id=241, version=40116,
count=128, id=243, version=40116,
count=39, id=242, version=40116,
count=23, id=259, version=24123,
count=22, id=261, version=24123,
count=15, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=152, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.