Overview

overview

9

Static

static

7

hanzo shar...er.exe

windows7-x64

9

hanzo shar...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hanzo share.rar

  • Size

    119.6MB

  • MD5

    62fa23e528cf03783b8a1cb60bae02bf

  • SHA1

    6a3009c608f5dc0c41a01fbde5df8522084b44f8

  • SHA256

    6231b959c36138d206246c01be451be98158f7d859a9e148e87b9580382bc17f

  • SHA512

    3f3afd54a98bd5c1d3fd4878598858d044966529a6f6df45c845854ec3eaf2aa358453484f9b0bca38fcf498b8ef6f44fea709d0faf0aa60ee41ec4efd0a3393

  • SSDEEP

    3145728:hxoLF2rCV0CbjXpiT1fA5qeLZdURTqSW4y2n0+JNisx32gA8ZjX9RYuftDP4WO:hxoLB0CbtyKddUw2n5JNVl2gPX9RYI0

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • hanzo share.rar
    .rar
  • hanzo share/Desktop 2023.12.16 - 20.32.25.01.mp4
  • hanzo share/hanzopermcracked.1337
  • hanzo share/hanzopermspoofer.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • hanzo share/x64/DeviceNameResolver.dll
    .dll windows:5 windows x64 arch:x64

    a0ee1bb440001cd886da5d201dd6aaed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/GleeBug/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    3d218aed6e8c20b76af68aa58d507074


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/LLVMDemangle.dll
    .dll windows:5 windows x64 arch:x64

    93e8ccb10d16bc39ff7a0664d9f9b8f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    89e42e9bec63b1ede39028faad8bc8da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    431bbb76e7c1c08be19a288962c9d865


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c29611e784744137000712f403c879ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    b8fb0f9de1821be86d66512722e74fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    f95c1d3728ee77b0823d248fb9250d56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Qt5WinExtras.dll
    .dll windows:6 windows x64 arch:x64

    77a3fd7b858955008f07aa06d73ef71f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/Scylla.dll
    .dll windows:5 windows x64 arch:x64

    f6d89f01ac203c927ab09308d21a6a32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/StaticEngine/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    1007d76571ae032d71f6f8bc1ff7b2c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    4eb30e7b473fb470c2a095c51d4499d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/XEDParse.dll
    .dll windows:6 windows x64 arch:x64

    d5b6035413ef1965ddc6469a06935ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/asmjit.dll
    .dll windows:5 windows x64 arch:x64

    d188a9bddc8c7fe3f4a8b7372d52914a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/db/Sunrise.exe.dd64
  • hanzo share/x64/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    1070d0a734a349d697cec96febe8448f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    30874efd591522944ad291448bc68777


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    0e16134644816a81b448ae10209d3b55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    d1d7ffbafbb4db0666b42d55788b5159


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    1d8b3b623e9bb80b11a33bbfc518793c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    ee2230a44ab648104b666165063f7e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    b39dc058b544d9e556587a5e697ddd4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    b8afc8585d723d9ab276ba73e1bd2546


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    ab2f864429f930ba88df7438cc4f117b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    f5dea7fb677575982aa2d2d1e9b72327


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    b365c4dcb0cf182c6bee36071a2b6ecc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/jansson.dll
    .dll windows:5 windows x64 arch:x64

    a260810dcedeea1b895d163295e60a56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/ldconvert.dll
    .dll windows:4 windows x64 arch:x64

    71a2b56185baacbb7c163b6dabe1b150


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    c58d8c60fcd67ebf99c2b6a7061f8dbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/loaddll.exe
    .exe windows:5 windows x64 arch:x64

    436cca4b1ec156c7845f9b34b253b7cc


    Code Sign

    Headers

    Imports

    Sections

  • hanzo share/x64/lz4.dll
    .dll windows:5 windows x64 arch:x64

    dfe2fecdbfb1cc41127a0ad863281a52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/msdia140.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a443c770827c4f26c2f12fcf24bd7ed8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    8bbb502b9452fee14bc96b306e6136bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    22c8d9aaec6efbde87d651ec6e738ef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/plugins/HookLibraryx64.dll
    .dll windows:5 windows x64 arch:x64

    97136c0502974f94b43e5b04b92ec824


    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/plugins/ScyllaHideX64DBGPlugin.dp64
    .dll windows:5 windows x64 arch:x64

    46da6f84526cae22f6c293375323ffcb


    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/plugins/scylla_hide.ini
  • hanzo share/x64/plugins/scylla_hide.log
  • hanzo share/x64/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    47ba88217ec90f23914b7f4616463268


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64_bridge.dll
    .dll windows:5 windows x64 arch:x64

    94482195a14b2f0ff3fd77f07609274d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64_dbg.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • hanzo share/x64/x64bridge.dll
    .dll windows:5 windows x64 arch:x64

    8c59cfd84e2d2d0bb0e1d4324d454376


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64dbg-unsigned.exe
    .exe windows:5 windows x64 arch:x64

    7f0b4d1ee906283eedc9372108cb2aa8


    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64dbg-unsigned.ini
  • hanzo share/x64/x64dbg.dll
    .dll windows:5 windows x64 arch:x64

    af045e4a0c81a574d2b3c9b1e28931a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64dbg.exe
    .exe windows:5 windows x64 arch:x64

    7f0b4d1ee906283eedc9372108cb2aa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hanzo share/x64/x64dbg.ini
  • hanzo share/x64/x64gui.dll
    .dll windows:6 windows x64 arch:x64

    dde5b9f408f72f5a3c6755534ba3029b


    Code Sign

    Headers

    Imports

    Exports

    Sections