General

  • Target

    ver4_file_x86x64.zip

  • Size

    16.6MB

  • MD5

    0e8591caf04581b4103d207548b65cca

  • SHA1

    e9acceed7ba2dc8efdf1e8a61dcb90ca5f1b7acb

  • SHA256

    365c6f98647915ead6699e2bb6a8d479dafbb2d743a7f48868fd6ecd9d6e6942

  • SHA512

    36a9e3931a4eef76fefce2f6bfa93cbbb66249cde9217d6760927c34a17a1976488d530252c4d3b032201f594ab31a77247b452cb6c223624474d8fd546a7e66

  • SSDEEP

    393216:880c4MUtjw7BOiS9PQQhJ21l8H5qNHjrja+5GKmD6C/xcvEPjIzR:L0cOtc7kiwhJWl8ZYP2ZKg6CJQELIl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ver4_file_x86x64.zip
    .zip

    Password: infected

  • ver4_file_x86x64/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • ver4_file_x86x64/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • ver4_file_x86x64/Resource/CMap/Identity-H
  • ver4_file_x86x64/Resource/CMap/Identity-V
  • ver4_file_x86x64/Resource/CMap/UCS2-GBK-EUC
  • ver4_file_x86x64/Resource/CMap/UniKS-UTF16-H
  • ver4_file_x86x64/Resource/CMap/UniKS-UTF16-V
  • ver4_file_x86x64/Resource/Font/AdobePIStd.otf
  • ver4_file_x86x64/Resource/Font/CourierStd-Bold.otf
  • ver4_file_x86x64/Resource/Font/CourierStd-BoldOblique.otf
  • ver4_file_x86x64/Resource/Font/CourierStd-Oblique.otf
  • ver4_file_x86x64/Resource/Font/CourierStd.otf
  • ver4_file_x86x64/Resource/Font/MinionPro-Bold.otf
  • ver4_file_x86x64/Resource/Font/MinionPro-BoldIt.otf
  • ver4_file_x86x64/Resource/Font/MinionPro-It.otf
  • ver4_file_x86x64/Resource/Font/MinionPro-Regular.otf
  • ver4_file_x86x64/Resource/Font/MyriadPro-Bold.otf
  • ver4_file_x86x64/Resource/Font/MyriadPro-BoldIt.otf
  • ver4_file_x86x64/Resource/Font/MyriadPro-It.otf
  • ver4_file_x86x64/Resource/Font/MyriadPro-Regular.otf
  • ver4_file_x86x64/Resource/Font/Pfm/SY______.PFM
  • ver4_file_x86x64/Resource/Font/Pfm/zx______.pfm
  • ver4_file_x86x64/Resource/Font/Pfm/zy______.pfm
  • ver4_file_x86x64/Resource/Font/SY______.PFB
  • ver4_file_x86x64/Resource/Font/ZX______.PFB
  • ver4_file_x86x64/Resource/Font/ZY______.PFB
  • ver4_file_x86x64/Resource/Locals/am.pak
  • ver4_file_x86x64/Resource/Locals/ar.pak
  • ver4_file_x86x64/Resource/Locals/fi.pak
  • ver4_file_x86x64/Resource/Locals/fil.pak
  • ver4_file_x86x64/Resource/Locals/fr.pak
  • ver4_file_x86x64/Resource/Locals/gu.pak
  • ver4_file_x86x64/Resource/Locals/he.pak
  • ver4_file_x86x64/Resource/Locals/hi.pak
  • ver4_file_x86x64/Resource/Locals/hr.pak
  • ver4_file_x86x64/Resource/Locals/hu.pak
  • ver4_file_x86x64/Resource/Locals/id.pak
  • ver4_file_x86x64/Resource/Locals/lt.pak
  • ver4_file_x86x64/Resource/Locals/lv.pak
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • ver4_file_x86x64/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • ver4_file_x86x64/Resource/resources.pak
  • ver4_file_x86x64/bentonite.cfg
    .png
  • ver4_file_x86x64/file.exe
    .exe windows:6 windows x64 arch:x64

    dde04a4a91a59ef24083f245b804ae7b


    Headers

    Imports

    Sections