General

  • Target

    Tibia_Setup_Simple.exe

  • Size

    7.8MB

  • MD5

    eb6afbee6340ece483da53518e62f31b

  • SHA1

    f8dd07eb5ec9092737c43856b73c8126ed299ac6

  • SHA256

    5a8b4b14613ee8ff0b4df90e98b5bc8f969e2df17f71feff562e88c146ce1d32

  • SHA512

    77d3aa4496ba486244ef5f6bd4a90fbfc87ea88bbc741d90b8bdbc32e46613f5bdabf3748671f88107c7f107b82cf667a3afd937b5932f4ed9c8fbe7899357b1

  • SSDEEP

    196608:NBfBzzikVmbZ80uSs+cU/zBveD7Nuy0TM90yTEQKM7Ej:3Bz+lZ80uSHbW7NuN/yfKM7Ej

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • Tibia_Setup_Simple.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • 3rdpartylicences/apache-v2.txt
  • 3rdpartylicences/openssl.txt
  • 3rdpartylicences/qt-3rdparty.txt
  • 3rdpartylicences/qt.txt
  • Qt5Concurrent.dll
    .dll windows:6 windows x86 arch:x86

    0da366d45d7ce157e9b91ae94f1d1344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    7637b98397764d8d795b817dd3b64bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    71d73a88d84f27af20b4f853ba076790


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    54283f28cc6f35f5a58e73e7c619f587


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    67247ca99f18a41ef96a01b8314c7a19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tibia.exe
    .exe windows:6 windows x86 arch:x86

    ac0740237234484e58a1cf0c58bb8682


    Code Sign

    Headers

    Imports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    61f1e91e16b424e953e73b59c843c234


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    5e6c730b75d8fd39bea11d1eda3c5720


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1.dll
    .dll windows:5 windows x86 arch:x86

    1a4728323839926a0cea4a4ffbbfc558


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1.dll
    .dll windows:5 windows x86 arch:x86

    fed3413a3019f260632acc9760eb8c69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6042f1676a7711e459589ef169a5b501


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x86 arch:x86

    60906b3adc1136b7747200c4084a6dab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    885301354f44f5c0640bbf3ef36e93dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qt.conf
  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    cd1ed3d8c92c10d38da7d8062bd9d51a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b06d4116da69a513992d529f84731e6f


    Code Sign

    Headers

    Imports

    Exports

    Sections