General

  • Target

    Soft.rar

  • Size

    7.5MB

  • MD5

    ad6671ddd80b8b6e2b0fb7a825a127dd

  • SHA1

    ce52663ebc29b054b02855b3a0ab11a844db9dfa

  • SHA256

    9fae11bbddc34f8003aff393b61a642201956696c91d0e24654bdabcf0ea8888

  • SHA512

    3afe118fbba8e337087619726072cf57cbd5618f45c21c4a7b7059a9e8f424c27187350a5fb53d0eeac31b4f5da63c32b7c92314b1a38b92e02abdb33761a7fc

  • SSDEEP

    196608:MBt4qj0lUiNQWBKtqXBaLKJ12OadmEo2ZJeTnFaL5gMc9q:omUiN5yKD2O7EoTF2gRc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Soft.rar
    .rar

    Password: 1515

  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 1515

    cdeb934de86508839c03da752239bd9f


    Headers

    Imports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    c0e775d13a8146396b3de4dc441694a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    a1d1434dddb062f5f5d6615852def52b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    8ceeb902c9887e633d0dec0e28e97944


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    eb741a767a6a80709b865cd0789aabcf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sсriрts/3345.txt
  • sсriрts/binkawin.asi
    .dll windows:5 windows x86 arch:x86

    Password: 1515

    eb47f3eba69cd506a684fe741aa6a115


    Headers

    Imports

    Exports

    Sections

  • sсriрts/demo.lua
  • sсriрts/menu.lua
  • sсriрts/sirius.lua.example
  • sсriрts/vehicle.lua
  • sсriрts/weapon.lua
  • tbb.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    4c74380b450a7a0ff4d566f16a86ccb8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    Password: 1515

    5ae9a136fafa10321f3d48251bf4f6a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    4a5f3c3aa39a4e0497dff0471239d5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    f143e2868efde0fcb493bd3051708a62


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/ACE.dll
    .dll windows:6 windows x86 arch:x86

    23076d501d734740bd988395f9a2bdc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AGM.dll
    .dll windows:6 windows x86 arch:x86

    0c4ef399e3ebaa650bb9619d8524550c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AIDE.dll
    .dll windows:6 windows x86 arch:x86

    35310b00e41c70ccb762d39f144b9fc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AdobeXMP.dll
    .dll windows:6 windows x86 arch:x86

    6af9b18d0fde4654e8b2a5c75a9563ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIB.dll
    .dll windows:6 windows x86 arch:x86

    1d0257e1aac91706ba5a3464d653bbcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIBUtils.dll
    .dll windows:6 windows x86 arch:x86

    6ec1b6b05b219bb02c165a7efc6c6592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/CoolType.dll
    .dll windows:6 windows x86 arch:x86

    4802bc9f23feb1a2452c8519e072c9db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/JP2KLib.dll
    .dll windows:6 windows x86 arch:x86

    83b05223f39b8593905fca1ffc7a2eba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xinput1_3.dll
    .dll windows:5 windows x64 arch:x64

    cfb6d24996ee7fd94a9861f495966a8f


    Code Sign

    Headers

    Imports

    Exports

    Sections