General

  • Target

    HoI IV creamapi.rar

  • Size

    439KB

  • MD5

    bf9a37a2cf7f00079f2e9387e15dbab0

  • SHA1

    574acd07d3889defb0b9306e279779d1c2f79a37

  • SHA256

    d1df980e3406421a092a2b9984bf7938562ffc9e12448b7e2dc1ecab4f297a16

  • SHA512

    f12ecd54d459d2e2a17b1e35a7f7e97cf10db9f6bf75321d12281fe4d91ab946dccb35ccff3f0c711f336982e8cbcbedb949f419a625c296761b56285e868351

  • SSDEEP

    12288:xAX/mEbS3NBgeutM9U1olqgOYuOvIrtates:xsOh9qeP9QkO0vIRaYs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HoI IV creamapi.rar
    .rar

    Password: cs.rin.ru

  • cream_api.ini
  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    Password: cs.rin.ru

    f46178d9777712efda7dc1efcb112703


    Headers

    Imports

    Exports

    Sections

  • steam_api64_o.dll
    .dll windows:5 windows x64 arch:x64

    Password: cs.rin.ru

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections