General

  • Target

    Software.zip

  • Size

    111.6MB

  • MD5

    2c7ceecc00bb5618ede1ff0d2e70030e

  • SHA1

    7d14e16fc5bdcf72b3ae20f049feef8f72bcedd6

  • SHA256

    cc1d6edec586ce6773608481fdc4a6d1d709da717f61f4edea1f6ef89460978b

  • SHA512

    40650292039716deb98042cb434cb16f163e3052f086dba59e33711f41b2e002c59cda48ae295ec72dd003a03fd06bd09d860c43560d786c7ee4a01ee6e1fb22

  • SSDEEP

    3145728:gufXIH8wZyEcysfh5MbIJwp1/+IvTl0DrzCaRfM:gMIH8w6Z5ZMTbl86ufM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Software.zip
    .zip

    Password: infected

  • aSoftware/LICENSE
  • aSoftware/LICENSES.chromium.html
  • aSoftware/chrome_100_percent.pak
  • aSoftware/chrome_200_percent.pak
  • aSoftware/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aSoftware/dxcompiler.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • aSoftware/dxil.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aSoftware/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • aSoftware/icudtl.dat
  • aSoftware/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • aSoftware/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • aSoftware/locales/af.pak
  • aSoftware/locales/am.pak
    .ps1
  • aSoftware/locales/ar.pak
  • aSoftware/locales/bg.pak
  • aSoftware/locales/bn.pak
  • aSoftware/locales/ca.pak
  • aSoftware/locales/cs.pak
  • aSoftware/locales/da.pak
  • aSoftware/locales/de.pak
  • aSoftware/locales/el.pak
  • aSoftware/locales/en-GB.pak
  • aSoftware/locales/en-US.pak
  • aSoftware/locales/es-419.pak
  • aSoftware/locales/es.pak
  • aSoftware/locales/et.pak
  • aSoftware/locales/fa.pak
  • aSoftware/locales/fi.pak
  • aSoftware/locales/fil.pak
  • aSoftware/locales/fr.pak
  • aSoftware/locales/gu.pak
    .ps1
  • aSoftware/locales/he.pak
  • aSoftware/locales/hi.pak
  • aSoftware/locales/hr.pak
    .ps1
  • aSoftware/locales/hu.pak
  • aSoftware/locales/id.pak
  • aSoftware/locales/it.pak
  • aSoftware/locales/ja.pak
  • aSoftware/locales/kn.pak
  • aSoftware/locales/ko.pak
  • aSoftware/locales/lt.pak
  • aSoftware/locales/lv.pak
  • aSoftware/locales/ml.pak
    .ps1
  • aSoftware/locales/mr.pak
  • aSoftware/locales/ms.pak
    .ps1
  • aSoftware/locales/nb.pak
  • aSoftware/locales/nl.pak
  • aSoftware/locales/pl.pak
  • aSoftware/locales/pt-BR.pak
  • aSoftware/locales/pt-PT.pak
  • aSoftware/locales/ro.pak
  • aSoftware/locales/ru.pak
  • aSoftware/locales/sk.pak
  • aSoftware/locales/sl.pak
  • aSoftware/locales/sr.pak
  • aSoftware/locales/sv.pak
  • aSoftware/locales/sw.pak
  • aSoftware/locales/ta.pak
  • aSoftware/locales/te.pak
  • aSoftware/locales/th.pak
  • aSoftware/locales/tr.pak
  • aSoftware/locales/uk.pak
  • aSoftware/locales/ur.pak
  • aSoftware/locales/vi.pak
  • aSoftware/locales/zh-CN.pak
  • aSoftware/locales/zh-TW.pak
  • aSoftware/resources.pak
  • aSoftware/resources/app.asar
    .js
  • aSoftware/snapshot_blob.bin
  • aSoftware/software.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    2ca6e285ed5439f02cf1a614871db8b9


    Headers

    Imports

    Exports

    Sections

  • aSoftware/v8_context_snapshot.bin
  • aSoftware/version
  • aSoftware/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • aSoftware/vk_swiftshader_icd.json
  • aSoftware/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections