General

  • Target

    huge(1).dat

  • Size

    102.1MB

  • MD5

    d4265891c008b4e4e1150f2994a5acec

  • SHA1

    d07a4d44b9e7a0c8b8169fdf1346573444a4dcf2

  • SHA256

    4dfdc6f9841b1c2acc95eedee27f30a110052176b09df74ff37eecf46168c14f

  • SHA512

    e0d95f281e27f3fe67d2ccaf22897418f8a3829f1b06c16e640f0ec91dd2e38b6092e91b2f55614e8b724c6dce8e1e398e63a454c9228d5abcd7d5e3498cb107

  • SSDEEP

    3145728:fgPnhuq1g1oPq+KIMdVqXxkQ6oo/BBJCY4p9WsX:oPnhuq1IoPqBIMd6x2o8BBJq+C

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • huge(1).dat
    .exe windows:4 windows x86 arch:x86

    f10e4da994053bf80c20cee985b32e29


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/Del.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/Ionic.Zip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Pinball/Newtonsoft.Json.xml
    .xml
  • $APPDATA/Pinball/Pinball.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/Xilium.CefGlue.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/cef.pak
  • $APPDATA/Pinball/cef_100_percent.pak
  • $APPDATA/Pinball/cef_200_percent.pak
  • $APPDATA/Pinball/cef_extensions.pak
  • $APPDATA/Pinball/cef_sandbox.lib
  • $APPDATA/Pinball/chrome_100_percent.pak
  • $APPDATA/Pinball/chrome_200_percent.pak
  • $APPDATA/Pinball/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    7070ac5f75228ef1a402cc7601724b56


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/devtools_resources.pak
  • $APPDATA/Pinball/icudtl.dat
  • $APPDATA/Pinball/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    14cd5ffd5d2a5e20eb8ffa21377b813a


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    3735a8293b010d7235da2a426b83c654


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/libcef.dll
    .dll windows:5 windows x86 arch:x86

    58464035e0bca9eb1de67c6faf328412


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/libcef.lib
  • $APPDATA/Pinball/locales/af.pak
  • $APPDATA/Pinball/locales/am.pak
  • $APPDATA/Pinball/locales/ar.pak
  • $APPDATA/Pinball/locales/bg.pak
  • $APPDATA/Pinball/locales/bn.pak
  • $APPDATA/Pinball/locales/ca.pak
  • $APPDATA/Pinball/locales/cs.pak
  • $APPDATA/Pinball/locales/da.pak
  • $APPDATA/Pinball/locales/de.pak
  • $APPDATA/Pinball/locales/el.pak
  • $APPDATA/Pinball/locales/en-GB.pak
  • $APPDATA/Pinball/locales/en-US.pak
  • $APPDATA/Pinball/locales/es-419.pak
  • $APPDATA/Pinball/locales/es.pak
  • $APPDATA/Pinball/locales/et.pak
  • $APPDATA/Pinball/locales/fa.pak
  • $APPDATA/Pinball/locales/fi.pak
  • $APPDATA/Pinball/locales/fil.pak
  • $APPDATA/Pinball/locales/fr.pak
  • $APPDATA/Pinball/locales/gu.pak
  • $APPDATA/Pinball/locales/he.pak
  • $APPDATA/Pinball/locales/hi.pak
  • $APPDATA/Pinball/locales/hr.pak
  • $APPDATA/Pinball/locales/hu.pak
  • $APPDATA/Pinball/locales/id.pak
  • $APPDATA/Pinball/locales/it.pak
  • $APPDATA/Pinball/locales/ja.pak
  • $APPDATA/Pinball/locales/kn.pak
  • $APPDATA/Pinball/locales/ko.pak
  • $APPDATA/Pinball/locales/lt.pak
  • $APPDATA/Pinball/locales/lv.pak
  • $APPDATA/Pinball/locales/ml.pak
  • $APPDATA/Pinball/locales/mr.pak
  • $APPDATA/Pinball/locales/ms.pak
  • $APPDATA/Pinball/locales/nb.pak
  • $APPDATA/Pinball/locales/nl.pak
  • $APPDATA/Pinball/locales/pl.pak
  • $APPDATA/Pinball/locales/pt-BR.pak
  • $APPDATA/Pinball/locales/pt-PT.pak
  • $APPDATA/Pinball/locales/ro.pak
  • $APPDATA/Pinball/locales/ru.pak
  • $APPDATA/Pinball/locales/sk.pak
  • $APPDATA/Pinball/locales/sl.pak
  • $APPDATA/Pinball/locales/sr.pak
  • $APPDATA/Pinball/locales/sv.pak
  • $APPDATA/Pinball/locales/sw.pak
  • $APPDATA/Pinball/locales/ta.pak
  • $APPDATA/Pinball/locales/te.pak
  • $APPDATA/Pinball/locales/th.pak
  • $APPDATA/Pinball/locales/tr.pak
  • $APPDATA/Pinball/locales/uk.pak
  • $APPDATA/Pinball/locales/ur.pak
  • $APPDATA/Pinball/locales/vi.pak
  • $APPDATA/Pinball/locales/zh-CN.pak
  • $APPDATA/Pinball/locales/zh-TW.pak
  • $APPDATA/Pinball/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $APPDATA/Pinball/log4net.xml
    .xml .vbs polyglot
  • $APPDATA/Pinball/natives_blob.bin
    .js
  • $APPDATA/Pinball/resources.pak
  • $APPDATA/Pinball/snapshot_blob.bin
  • $APPDATA/Pinball/start.bat
  • $APPDATA/Pinball/swiftshader/Xilium.CefGlue.pdb
  • $APPDATA/Pinball/swiftshader/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    b85270df2817667c40fde4ad43f6b7a8


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/v8_context_snapshot.bin
  • $APPDATA/Pinball/vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    bd2d4717eeba91c1b9bf3fe06ddeb87b


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/vk_swiftshader_icd.json
  • $APPDATA/Pinball/vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    0c3e803dd8e326c1278d7872e609b579


    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Pinball/widevinecdmadapter.dll
    .dll windows:5 windows x86 arch:x86

    5bdf2520eca679859c4a14a3b56efd62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/liteFirewall.dll
    .dll windows:5 windows x86 arch:x86

    d581909bbb46b6bf2b16e48b9e3dd1d6


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    f10e4da994053bf80c20cee985b32e29


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections