General

  • Target

    client.zip

  • Size

    4.8MB

  • MD5

    44c3818146a4e050934381c669f68ea3

  • SHA1

    5291eebcb0163e2a2183fe4c819201e5304b23fb

  • SHA256

    0fd0f9b2482ab2a9768ed5fc256e9a4f714aeefe5a14633b4718607cf7b6e330

  • SHA512

    71e37195c8e8a398d41ca69a8718311c0bbedcf4b376f578dca9b7023a94c0a2d3ec21f4dadef2da9e18bed08730f1a32a50966d81e384111ee412baf22908a7

  • SSDEEP

    98304:P05DxVt5ehKDG3sWFfF6RAiSe7gmBVYBuKhgU1Z91YMz:8Ft5e5scoAAcQVcu8Z91tz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • client.zip
    .zip

    Password: arpl

  • client.exe
    .exe windows:4 windows x86 arch:x86

    Password: arpl

    c6e51dda1622035b42b177c9afe67c30


    Headers

    Imports

    Sections

  • config.txt
  • lib/client.jar
    .jar
  • lib/core.jar
    .jar
  • lib/fenster.exe
    .exe windows:4 windows x64 arch:x64

    Password: arpl

    ad1b83cc2089d0dc822e84d5ea9110f5


    Headers

    Imports

    Sections

  • lib/gluegen-rt.jar
    .jar
  • lib/gluegen_rt.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    6a34611d0aa7c27903557b5cdbc9157e


    Headers

    Imports

    Exports

    Sections

  • lib/jogl-all.jar
    .jar
  • lib/jogl_desktop.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    042cd7a76f23048bcb439a2466743518


    Headers

    Imports

    Exports

    Sections

  • lib/jogl_mobile.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    042cd7a76f23048bcb439a2466743518


    Headers

    Imports

    Exports

    Sections

  • lib/nativewindow_awt.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    365a2cf944f461c9c5e51157df8b73e2


    Headers

    Imports

    Exports

    Sections

  • lib/nativewindow_win32.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    fb50f2fd906f2a4d554fb086e54743d6


    Headers

    Imports

    Exports

    Sections

  • lib/net.jar
    .jar
  • lib/newt_head.dll
    .dll windows:4 windows x64 arch:x64

    Password: arpl

    b6548441b4d9cac1dd406a94b3ea36a5


    Headers

    Imports

    Exports

    Sections