Resubmissions

02/05/2024, 15:09

240502-sjg1labe5y 10

General

  • Target

    v4_file_x86x64.rar

  • Size

    14.2MB

  • MD5

    8ead67eaf5042342ecf0e41e051e7c0f

  • SHA1

    cf73d171a1f8fd71e0a6b9d0f1ed45bf630869a3

  • SHA256

    a02474c5f5c9c8c6e97de48c1e1d265211ab471a5ad1f910188b27867e3cfcd4

  • SHA512

    3e1b50c1079ef2d3ce9aa1280ee0c8251722bb9e29fd2188ac720b3bdd90ecc675bae827fa8defdc2a766ef8da89275cb0c5b554ae6db816e5a9d3897ad228e7

  • SSDEEP

    393216:0dODV4dU8Srmg+9SkPh+b1sq3Zfc8z5a6adU:lV4NSrmqkPh+b1sqJEO5SU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • v4_file_x86x64.rar
    .rar

    Password: 1234

  • Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1234

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1234

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/Locals/am.pak
  • Resource/Locals/ar.pak
  • Resource/Locals/fi.pak
  • Resource/Locals/fil.pak
  • Resource/Locals/fr.pak
  • Resource/Locals/gu.pak
  • Resource/Locals/he.pak
  • Resource/Locals/hi.pak
  • Resource/Locals/hr.pak
  • Resource/Locals/hu.pak
  • Resource/Locals/id.pak
  • Resource/Locals/lt.pak
  • Resource/Locals/lv.pak
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Resource/resources.pak
  • bentonite.cfg
    .png
  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    fd1076cf47b8d093e1c56ba8f7971e46


    Headers

    Imports

    Sections