General

  • Target

    AppSetupRx_instruction_x64_x86WIN_EN-US.zip

  • Size

    18.7MB

  • MD5

    935d1da072b1590d4e06f862a114b877

  • SHA1

    daeee283dd7a9fa78a0d5cd698d9a7b4d296546d

  • SHA256

    529710444deb10b8a89c78fd831458efbf1eace6802768225b5777e00f17dfb0

  • SHA512

    f72ad27fe39c9f7dbdfcd12799ab9949ac08499024d9f840c26bff677a28af896c61c55a03074d546781045b534feaa269cfb62ea47f5048966bd18eb7d558b4

  • SSDEEP

    393216:NkzE6rnKmCALMPFGtoPHNeEodisPOnbr8nwIQkJ5s2Nc2qS:WzEmd1LMctqNe3sZbgZrJF5R

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AppSetupRx_instruction_x64_x86WIN_EN-US.zip
    .zip

    Password: 2022

  • AppSetup.en-us.v1.rar
    .rar

    Password: 2022

  • AppSetup.en-us.v1/Setup.exe
    .exe windows:5 windows x64 arch:x64

    Password: 2022

    4bde85c7688e2c77f8364c4b8a0bf47c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/leman.rar
  • AppSetup.en-us.v1/libvlc.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    5c455bebc40d8ab001d42875154b8ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/libvlccore.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    f11716690dc3b1ac312b344caaf28102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/access/libfilesystem_plugin.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    c8ea5cccd97a6dd002319773b40d4c92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/access/libimem_plugin.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    38319b815c775e9d2da9a3122624b0f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/audio_output/libdirectsound_plugin.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    4d4cd5a463324a8045309e7f2f372a88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/audio_output/libwasapi_plugin.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2022

    4a664cd964a3b4a9aad1e2240cb1d3a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/codec/libavcodec_plugin.dll
    .dll windows:4 windows x86 arch:x86

    b3dde07c154253c70594b806978745b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/codec/libd3d11va_plugin.dll
    .dll windows:4 windows x86 arch:x86

    c77c7754dd70a306cd5afaed021b2342


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/video_output/libdirect3d11_plugin.dll
    .dll windows:4 windows x86 arch:x86

    c58610bd5a41199300321b50bf142e02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/video_output/libdirect3d9_plugin.dll
    .dll windows:4 windows x86 arch:x86

    980b9d823fed413278376e4f26f7e7da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/video_output/libdrawable_plugin.dll
    .dll windows:4 windows x86 arch:x86

    e96f36aeaf87e83f2c7a02de0ef6c488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/plugins/video_output/libvmem_plugin.dll
    .dll windows:4 windows x86 arch:x86

    1dc5da0835b9fb112937a0cccfb1d103


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/resources.pak
  • AppSetup.en-us.v1/spall.rpm
  • AppSetup.en-us.v1/sqlite.dll
    .dll windows:5 windows x64 arch:x64

    aa763994da5090e7c378c9ef039f1523


    Headers

    Imports

    Exports

    Sections

  • AppSetup.en-us.v1/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PA$$WORD 2022
  • Read me before you start.txt