General

  • Target
    ver3_release_file.rar
  • Size 11.2MB
  • Sample240409-sdhd6sde5v
  • SHA256 3ea1e1a174c2142f3555390abc038568079b822e1ad3aa542c184ef296f848af
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ver3_release_file.rar
    .rar 11.2MB
  • LiteRes.dll
    .dll 735KB
  • LiteSkinUtils.dll
    .dll 48KB
  • Resource/CMap/Identity-H
    8KB
  • Resource/CMap/Identity-V
    2KB
  • Resource/CMap/UCS2-GBK-EUC
    238KB
  • Resource/CMap/UniKS-UTF16-H
    128KB
  • Resource/CMap/UniKS-UTF16-V
    3KB
  • Resource/Font/AdobePIStd.otf
    83KB
  • Resource/Font/CourierStd-Bold.otf
    29KB
  • Resource/Font/CourierStd-BoldOblique.otf
    31KB
  • Resource/Font/CourierStd-Oblique.otf
    31KB
  • Resource/Font/CourierStd.otf
    30KB
  • Resource/Font/MinionPro-Bold.otf
    205KB
  • Resource/Font/MinionPro-BoldIt.otf
    245KB
  • Resource/Font/MinionPro-It.otf
    246KB
  • Resource/Font/MinionPro-Regular.otf
    205KB
  • Resource/Font/MyriadPro-Bold.otf
    88KB
  • Resource/Font/MyriadPro-BoldIt.otf
    90KB
  • Resource/Font/MyriadPro-It.otf
    88KB
  • Resource/Font/MyriadPro-Regular.otf
    88KB
  • Resource/Font/Pfm/SY______.PFM
    672B
  • Resource/Font/Pfm/zx______.pfm
    683B
  • Resource/Font/Pfm/zy______.pfm
    684B
  • Resource/Font/SY______.PFB
    33KB
  • Resource/Font/ZX______.PFB
    73KB
  • Resource/Font/ZY______.PFB
    94KB
  • Resource/Locals/am.pak
    145KB
  • Resource/Locals/ar.pak
    148KB
  • Resource/Locals/fi.pak
    93KB
  • Resource/Locals/fil.pak
    103KB
  • Resource/Locals/fr.pak
    109KB
  • Resource/Locals/gu.pak
    199KB
  • Resource/Locals/he.pak
    124KB
  • Resource/Locals/hi.pak
    206KB
  • Resource/Locals/hr.pak
    99KB
  • Resource/Locals/hu.pak
    106KB
  • Resource/Locals/id.pak
    91KB
  • Resource/Locals/lt.pak
    107KB
  • Resource/Locals/lv.pak
    107KB
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
    209KB
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
    10KB
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
    12KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
    12KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
    18KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
    13KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
    13KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
    13KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
    13KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
    14KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
    14KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
    15KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
    12KB
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
    4KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
    9KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
    9KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
    9KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
    8KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
    9KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
    9KB
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
    9KB
  • Resource/resources.pak
    4.9MB
  • bentonite.cfg
    .png 963KB
  • setup.exe
    .exe 759.0MB

ver3_release_file.rar

  • SHA256 3ea1e1a174c2142f3555390abc038568079b822e1ad3aa542c184ef296f848af
  • MD5 SHA1 SHA512 SSDEEP
Password
1234