Resubmissions

26-03-2024 14:35

240326-ryecksfd5y 10

26-03-2024 14:27

240326-rse2xsfb8y 10

General

  • Target

    New folder.rar

  • Size

    15.3MB

  • MD5

    6677e9a1e490857b5bdfb0744cd260fe

  • SHA1

    20a0692c3001f36c56f811d614dfbe6b2a0b5612

  • SHA256

    1cdf0dcd13a46906d73588a4f2ef20637d25706ce90b53a7b6f1701c28cb3596

  • SHA512

    52c80873ff9d70a2ef1669ccfb1f2e1cfeb2a521102d0b38164c88f680924b84560245c3104b6c7e742bd952617db405720f6b08f541d6c4cdf1c33a25478ab6

  • SSDEEP

    393216:NUYQW+GfB8a8lENPHeGcC6yz9Jp0tu/5TKP0Arl:y9GfBntHeO9Jpn/Fe0AR

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 43 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • New folder.rar
    .rar
  • 081899c5257cdf6b27b238f9114b9151a755a2044cb463eb2214fa9101c4cd89.exe
    .dll windows:4 windows x86 arch:x86

    95624c4d87545e6bc7cb7d73cbefbcba


    Headers

    Imports

    Exports

    Sections

  • 082060e3320870d1d576083e0ee65c06a1104913ae866137f8ca45891c059a76.exe
    .exe windows:6 windows x86 arch:x86

    2fb40ed232ce119fffafdcc8e83b0b1f


    Headers

    Imports

    Sections

  • 09d22d634084239df510d088dd1685886fdba2810df4067771142fb2204cef64.exe
    .exe windows:4 windows x86 arch:x86

    f78d9d06b9070b73486ec891ec3620c5


    Headers

    Imports

    Sections

  • 1f4e927f6e5ff4ae660f4d99194a9a7c05d5d829c6c3dbe1ee52a00fc740d6a4.exe
    .exe windows:4 windows x64 arch:x64

    efca766733fc46327b4f9355c8be8373


    Headers

    Imports

    Sections

  • 20efc37efcb36bc4a7cdf75ff667d3193959bf1858a4c115fd4301ca11ce8ddb.exe
    .dll windows:4 windows x86 arch:x86

    59073cb9965438bfb47d63ae53265cb8


    Headers

    Imports

    Exports

    Sections

  • 23b5ce252f1cb3ff40a3bcb3ea53dd674175c3ad782b00e33ae45c8c87fa265b.exe
    .exe windows:5 windows x86 arch:x86

    43ed6e1ea41b9a53f91c91dbf8b95f27


    Headers

    Imports

    Sections

  • 35fdad147c2ab2c36dd7fd1ad1ae26b80be6c501bb22120b741be3ab34be168f.exe
    .exe windows:6 windows x86 arch:x86

    60b49bcc45629d73f7233c4f83703612


    Headers

    Imports

    Sections

  • 36bfd9f40ce0043c878b28ca80dda5315cf681215baf4e1d539456d89b907807.exe
    .exe windows:4 windows x86 arch:x86

    f78d9d06b9070b73486ec891ec3620c5


    Headers

    Imports

    Sections

  • 56ec95785f91418751ad5788f9076af108ae19e03d2e0c0551ae8f8d8f5acba4.exe
    .exe windows:6 windows x86 arch:x86

    8df505348d6b0f8009519e11bb59d2db


    Headers

    Imports

    Sections

  • 675e7e38d969e9c0af164337a180b2941d4a676b7e0c345da1de1b2d42ed31a8.exe
    .exe windows:5 windows x86 arch:x86

    bf5a4aa99e5b160f8521cadd6bfe73b8


    Headers

    Imports

    Sections

  • 6b4df381119ee2beac0fb75184addb6cdd045ddd5e0fa09365a51331a484cd7a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 6b4f6a820d415a88ee156607b13450cbe0bedad4eb05961c55f5926f86262296.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 721ccbb780b308c6c40817749b6764ad06cd2e56389bba1618a0dadc362d6429.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 75a9ade19696be512a894b659c4bebd174a868f404da5479f4fd96494e04c71d.exe
    .exe windows:5 windows x86 arch:x86

    993552dae29051193848bdafd3c378a0


    Headers

    Imports

    Sections

  • 79271d57c531c79536bc0be0d71e3a372bed9c10689257a7727475ab41e3e161.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • *.*/ConfigTool.exe
    .exe windows:5 windows x86 arch:x86

    10d0ef988379db77e47ddff72c346969


    Headers

    Imports

    Sections

  • *.*/GGDUI.dll
    .dll windows:5 windows x86 arch:x86

    47f4cca7bf4e239c0e00d4d07b6f5daf


    Headers

    Imports

    Exports

    Sections

  • *.*/Microsoft.VC90.MFC.manifest
    .xml
  • *.*/Proxy.dat
  • *.*/SinBa.exe
    .exe windows:5 windows x86 arch:x86

    5ba71f6e364587f0d29736119c301aaf


    Headers

    Imports

    Sections

  • *.*/Ver.ini
  • *.*/WatchUpdate.ini
  • *.*/default.zip
    .zip
  • 1star.png
    .png
  • 2star.png
    .png
  • 3star.png
    .png
  • ListBox.xml
    .xml
  • about.xml
    .xml
  • about_logo.png
    .png
  • addr-comb-bg.png
    .png
  • addr-dropdown-d.png
    .png
  • addr-dropdown-h.png
    .png
  • addr-dropdown-n.png
    .png
  • addr-dropup-d.png
    .png
  • addr-dropup-h.png
    .png
  • addr-dropup-n.png
    .png
  • addr-label-01-d.png
    .png
  • addr-label-01-n.png
    .png
  • addr-label-02-d.png
    .png
  • addr-label-02-n.png
    .png
  • bg.jpg
    .png
  • btn-add-d.png
    .png
  • btn-add-h.png
    .png
  • btn-add-n-01.png
    .png
  • btn-add-n-02.png
    .png
  • btn-back-d.png
    .png
  • btn-back-dis.png
    .png
  • btn-back-h.png
    .png
  • btn-back-n-01.png
    .png
  • btn-back-n-02.png
    .png
  • btn-forward-d.png
    .png
  • btn-forward-dis.png
    .png
  • btn-forward-h.png
    .png
  • btn-forward-n-01.png
    .png
  • btn-forward-n-02.png
    .png
  • btn-home-d.png
    .png
  • btn-home-h.png
    .png
  • btn-home-n-01.png
    .png
  • btn-home-n-02.png
    .png
  • btn-refresh-d.png
    .png
  • btn-refresh-dis.png
    .png
  • btn-refresh-h.png
    .png
  • btn-refresh-n-01.png
    .png
  • btn-refresh-n-02.png
    .png
  • btn-tab-close-01-d.png
    .png
  • btn-tab-close-01-h.png
    .png
  • btn-tab-close-01-n.png
    .png
  • btn-tab-close-02-d.png
    .png
  • btn-tab-close-02-h.png
    .png
  • btn-tab-close-02-n.png
    .png
  • commandmenu.xml
    .xml
  • default.png
    .png
  • editwindow.xml
    .xml
  • favorite_hot.png
    .png
  • favorite_normal.png
    .png
  • favorite_push.png
    .png
  • ico-default-dis.png
    .png
  • ico-default.png
    .png
  • ico-menu-feedback-h.png
    .png
  • ico-menu-feedback-n.png
    .png
  • ico-menu-helpcenter-h.png
    .png
  • ico-menu-helpcenter-n.png
    .png
  • ico-menu-quit-h.png
    .png
  • ico-menu-quit-n.png
    .png
  • ico-pic-dis.png
    .png
  • ico-pic.png
    .png
  • ico-skin-checked.png
    .png
  • ico-skin-set.png
    .png
  • icon-closetable-hover.png
    .png
  • icon-closetable-nomal.png
    .png
  • icon-closetable-press.png
    .png
  • icon-closetable-select.png
    .png
  • icon-menu-expand-h.png
    .png
  • icon-menu-expand-n.png
    .png
  • line-h-01.png
    .png
  • line-h-02.png
    .png
  • line-v-01.png
    .png
  • line-v-02.png
    .png
  • loading.gif
    .gif
  • logo-01.png
    .png
  • logo-02-01.png
    .png
  • logo-02-02.png
    .png
  • main_dlg.xml
    .xml
  • main_menu.xml
    .xml
  • menu-bg.png
    .png
  • menu-item-bg.png
    .png
  • menu_private_hide.png
    .png
  • menu_private_show.png
    .png
  • preview.jpg
    .jpg
  • private_bkg.png
    .png
  • private_close_hot.png
    .png
  • private_close_normal.png
    .png
  • private_close_push.png
    .png
  • private_edit_bk.png
    .png
  • private_editcancel_hot.png
    .png
  • private_editcancel_normal.png
    .png
  • private_editcancel_push.png
    .png
  • private_editclose_hot.png
    .png
  • private_editclose_normal.png
    .png
  • private_editclose_push.png
    .png
  • private_editok_hot.png
    .png
  • private_editok_normal.png
    .png
  • private_editok_push.png
    .png
  • private_hot.png
    .png
  • private_more_hot.png
    .png
  • private_more_normal.png
    .png
  • private_moredown_hot.png
    .png
  • private_moredown_normal.png
    .png
  • private_moreup_hot.png
    .png
  • private_moreup_normal.png
    .png
  • private_push.png
    .png
  • privatemenu.xml
    .xml
  • safepictur.png
    .png
  • scroll-hover_press.png
    .png
  • scroll.png
    .png
  • shadow.png
    .png
  • skin.xml
    .xml
  • tab-01-h.png
    .png
  • tab-01-n.png
    .png
  • tab-02-h.png
    .png
  • tab-02-n.png
    .png
  • tab-s.png
    .png
  • winclose-d.png
    .png
  • winclose-h.png
    .png
  • winclose-n-01.png
    .png
  • winclose-n-02.png
    .png
  • winmax-d.png
    .png
  • winmax-h.png
    .png
  • winmax-n-01.png
    .png
  • winmax-n-02.png
    .png
  • winmin-d.png
    .png
  • winmin-h.png
    .png
  • winmin-n-01.png
    .png
  • winmin-n-02.png
    .png
  • winrestore-d.png
    .png
  • winrestore-h.png
    .png
  • winrestore-n-01.png
    .png
  • winrestore-n-02.png
    .png
  • winsetting-d.png
    .png
  • winsetting-h.png
    .png
  • winsetting-n-01.png
    .png
  • winsetting-n-02.png
    .png
  • winskin-d.png
    .png
  • winskin-h.png
    .png
  • winskin-n-01.png
    .png
  • winskin-n-02.png
    .png
  • *.*/local/blank/blank.html
    .html
  • *.*/local/blocklist/blocklist.dat
  • *.*/local/error/error.html
    .html
  • *.*/local/error/offcancl.html
    .html
  • *.*/local/error/reject.html
    .html .js polyglot
  • *.*/local/images/bg.png
    .png
  • *.*/local/images/infobg.png
    .png
  • *.*/local/images/logo.png
    .png
  • *.*/local/navlist/web_nav.html
    .html
  • *.*/local/styles/error.css
  • *.*/log4cxx.dll
    .dll windows:4 windows x86 arch:x86

    59538fe89c921a032c34e66771fba117


    Headers

    Imports

    Exports

    Sections

  • *.*/loginfo.properties
  • *.*/mfc90.dll
    .dll windows:5 windows x86 arch:x86

    f2d8030f2fb5ae92ea26c320740a673b


    Code Sign

    Headers

    Imports

    Sections

  • *.*/mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • *.*/mfcm90.dll
    .dll windows:5 windows x86 arch:x86

    7dabdb1d81bc318202cca27aed9c03e6


    Headers

    Imports

    Exports

    Sections

  • *.*/mfcm90u.dll
    .dll windows:5 windows x86 arch:x86

    8835e897cda95e4221fbfed49b505c04


    Headers

    Imports

    Exports

    Sections

  • *.*/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • *.*/nircmd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • *.*/profile.dat
  • *.*/pthreadVC2.dll
    .dll windows:5 windows x86 arch:x86

    d3d8c4b714214422e346e26864a896bb


    Headers

    Imports

    Exports

    Sections

  • *.*/signtool.exe
    .exe windows:6 windows x86 arch:x86

    018cef17108f0a49c10d12a42436c93f


    Headers

    Imports

    Sections

  • *.*/update.exe
    .exe windows:5 windows x86 arch:x86

    0e4a994d0c355bbae71fb384faa65e57


    Headers

    Imports

    Exports

    Sections

  • *.*/update.ini
  • *.*/wh.pfx
  • *.*/˫ǩ.bat
  • 847001fe67b260c91fdc360297f6758598c41eb78fc4aae6adc4a4e2dd813b7e.exe
    .exe windows:4 windows x86 arch:x86

    f78d9d06b9070b73486ec891ec3620c5


    Headers

    Imports

    Sections

  • 97d846563e9c5da173d27fd11a6f182709c665dba0cb3f85a882c7b3e9cd9a3b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 9a5a08d7a4579e11f59594fe053c8157c20ab74a7775a11a1aa6154a3eb6744a.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 9da42140cab695b77cde560dd1109d2b96d263e25c21bba0e70604f0717bf270.exe
    .exe windows:4 windows x86 arch:x86

    0de57ff9952e3f625314cb02fbf1a215


    Headers

    Imports

    Sections

  • ac7da11c38cce3b21137e629d76614f6350cbc96db41bede9029c83d9dfa98e2.exe
    .exe windows:5 windows x86 arch:x86

    43a0979960d0652d489e87b791af1749


    Headers

    Imports

    Sections

  • b3489810af4e4d0d953eb438e3550ace5d52a5c8818a6cae7af6d30ba5482e5f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bf11915a5a5f8e1de827676250505e7f503c0744da757f8290f077d3d5d81655.exe
    .dll regsvr32 windows:4 windows x86 arch:x86

    68e74510d5b809314ae90b0cd77b3c77


    Headers

    Imports

    Exports

    Sections

  • c453aa991f1fb96ec3aebf334f8d9f5a5256dcdf90e697a007575771705be23e.exe
    .dll regsvr32 windows:4 windows x86 arch:x86

    91cbf912c7d1d0f54eac2c2680e393e2


    Headers

    Imports

    Exports

    Sections

  • c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.exe
    .exe windows:5 windows x86 arch:x86

    ce51c671c94cce6379a0f6823fad4112


    Code Sign

    Headers

    Imports

    Sections

  • cfe55dc501afeb1e83c683ec596be33878597e8d318f8e9739557af1f208b348.exe
    .exe windows:4 windows x86 arch:x86

    9724742042a87080670437a8603a784e


    Headers

    Imports

    Sections

  • d2a120aa4a8aeb87408828d4e7e0da615cb83e32ca5fccc79eee70bca3ea4d78.exe
    .exe windows:5 windows x86 arch:x86

    d27b8cd6211542e8ebef53d3fbc7b5a8


    Headers

    Imports

    Sections

  • db97db6b0367434c2170eb34f828ec6b99032a4722ea55dc14a72883d8af1c1b.exe
    .dll windows:4 windows x86 arch:x86

    59073cb9965438bfb47d63ae53265cb8


    Headers

    Imports

    Exports

    Sections

  • dc276b7ca4a980cf487b73b4ef9c40fb93f1b00b5c757a726057ab21a0372ecf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • e714a8c576d7e04c2a8c6f4f8aa6627543524e61f4e3fc402a24d6981bad03a4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Main.pyc