General

  • Target

    fe.zip

  • Size

    14.3MB

  • MD5

    baaab47cd56dc5a128400370a761bafd

  • SHA1

    ac1d16668c8a645def021c2b30775bf794ad4e6f

  • SHA256

    3755eb395655c583f8f6d435ce2de16587c185db064001fb01021cec6cd077be

  • SHA512

    aa673480410e5ed71e507206e845fdee6650232c12b11417316e8854c24b665b0b9d39aaed5af1cc5bec4f0e8963a6c3875a5b82e6693fa15c8e585a26c4f54d

  • SSDEEP

    393216:cgsk55sN5ltwFeeILI/FYfULYei/IxB99uFkK5DBJFqypX:UTTwF6LI/FYfULY4BPG/l

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • fe.zip
    .zip
  • release_4/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • release_4/Language/an.txt
  • release_4/Language/ar.txt
  • release_4/Language/az.txt
  • release_4/Language/mn.txt
  • release_4/Language/mng.txt
  • release_4/Language/mng2.txt
  • release_4/Language/mr.txt
  • release_4/Language/ne.txt
  • release_4/Language/nl.txt
  • release_4/Language/pa-in.txt
  • release_4/Language/pl.txt
  • release_4/Language/ps.txt
  • release_4/Language/pt-br.txt
  • release_4/Language/pt.txt
  • release_4/Language/ro.txt
  • release_4/Language/ru.txt
  • release_4/Language/sa.txt
  • release_4/Language/si.txt
  • release_4/Language/sk.txt
  • release_4/Language/sl.txt
  • release_4/Language/sr-spc.txt
  • release_4/Language/sr-spl.txt
  • release_4/Language/sv.txt
  • release_4/Language/sw.txt
  • release_4/Language/ta.txt
  • release_4/Language/tg.txt
  • release_4/Language/th.txt
  • release_4/Language/tk.txt
  • release_4/Language/tr.txt
  • release_4/Language/tt.txt
  • release_4/Language/ug.txt
  • release_4/Language/uk.txt
  • release_4/Language/uz-cyrl.txt
  • release_4/Language/uz.txt
  • release_4/Language/va.txt
  • release_4/Language/vi.txt
  • release_4/Language/yo.txt
  • release_4/Language/zh-cn.txt
  • release_4/Language/zh-tw.txt
  • release_4/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • release_4/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • release_4/Resource/CMap/Identity-H
  • release_4/Resource/CMap/Identity-V
  • release_4/Resource/CMap/UCS2-GBK-EUC
  • release_4/Resource/CMap/UniKS-UTF16-H
  • release_4/Resource/CMap/UniKS-UTF16-V
  • release_4/Resource/Font/AdobePIStd.otf
  • release_4/Resource/Font/CourierStd-Bold.otf
  • release_4/Resource/Font/CourierStd-BoldOblique.otf
  • release_4/Resource/Font/CourierStd-Oblique.otf
  • release_4/Resource/Font/CourierStd.otf
  • release_4/Resource/Font/MinionPro-Bold.otf
  • release_4/Resource/Font/MinionPro-BoldIt.otf
  • release_4/Resource/Font/MinionPro-It.otf
  • release_4/Resource/Font/MinionPro-Regular.otf
  • release_4/Resource/Font/MyriadPro-Bold.otf
  • release_4/Resource/Font/MyriadPro-BoldIt.otf
  • release_4/Resource/Font/MyriadPro-It.otf
  • release_4/Resource/Font/MyriadPro-Regular.otf
  • release_4/Resource/Font/Pfm/SY______.PFM
  • release_4/Resource/Font/Pfm/zx______.pfm
  • release_4/Resource/Font/Pfm/zy______.pfm
  • release_4/Resource/Font/SY______.PFB
  • release_4/Resource/Font/ZX______.PFB
  • release_4/Resource/Font/ZY______.PFB
  • release_4/Resource/Locals/am.pak
  • release_4/Resource/Locals/ar.pak
  • release_4/Resource/Locals/fi.pak
  • release_4/Resource/Locals/fil.pak
  • release_4/Resource/Locals/fr.pak
  • release_4/Resource/Locals/gu.pak
  • release_4/Resource/Locals/he.pak
  • release_4/Resource/Locals/hi.pak
  • release_4/Resource/Locals/hr.pak
  • release_4/Resource/Locals/hu.pak
  • release_4/Resource/Locals/id.pak
  • release_4/Resource/Locals/lt.pak
  • release_4/Resource/Locals/lv.pak
  • release_4/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • release_4/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • release_4/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • release_4/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • release_4/Resource/resources.pak
  • release_4/bentonite.cfg
    .png
  • release_4/setup.exe
    .exe windows:6 windows x64 arch:x64

    309eeddbaf0bd91b0960dcbfea25b224


    Headers

    Imports

    Sections