General

  • Target

    NitroGithub.rar

  • Size

    8.3MB

  • MD5

    2f6b9110b1154da9543a1b88c72541ef

  • SHA1

    6a79c5e0ba41ca7ed011c60d7aec96e7e4f34e58

  • SHA256

    dd2371de1a12f882072283e8fb4aada5dddc55a0c7a561c45a61c2fbb9783a3d

  • SHA512

    dae9b4397f9b7c070fb57bb2ff00afa9edfbdc46bd6c1daf8779c75f6b7aba22ea86155f9c81eb92382b79763538fd156ac718a315c8461dd1080d154ee29e20

  • SSDEEP

    196608:9C5FmO5z8RdGnKk7lETzcplx2Ze0ij++z9uCgBz:9C5FRF8DGKkkedz9iz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • NitroGithub.rar
    .rar

    Password: 1234

  • Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • locales/.en/_23.cfs
  • locales/.en/deletable
  • locales/.en/segments
  • locales/en.qch
  • locales/en.qhc
  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nitro.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/output/FocusManager.node
    .dll windows:6 windows x64 arch:x64

    8637366b45dd355deb4f421c255d5156


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/output/OafIpc.node
    .dll windows:6 windows x64 arch:x64

    f9779cbce4d84f766525ed6795775c3f


    Headers

    Imports

    Exports

    Sections

  • resources/electron.asar
    .js
  • ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections