General

  • Target

    Illegal_Services-main.zip

  • Size

    15.1MB

  • MD5

    088b517d3c15c5750624bab135154c00

  • SHA1

    ab9342b8cfbe05e8c780d9dc202acd2f623122bc

  • SHA256

    5ee321db2d46241ad086f25bdd16817c9580e20444abfa5cee63e03fd3ae5313

  • SHA512

    c664027277b863a1ffb0145a18fe064518324a98ff0fe0fa588a8c589f3292a654b3b7b6e1823415276c746f02bd334f7fb67736618ced9e03e5427e36b73fa5

  • SSDEEP

    393216:JRa7OFzncIIOEs2LnfIPZmBsPqaLMA//3yMxMSLWO3qEv6eWxhJ:S7mTcZOEs8nAPUBs7/isB6Ev6eWxn

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • Illegal_Services-main.zip
    .zip
  • Illegal_Services-main/COPYING
  • Illegal_Services-main/ChangeLog.txt
  • Illegal_Services-main/EULA.rtf
    .rtf
  • Illegal_Services-main/Illegal_Services.exe
    .exe windows:4 windows x86 arch:x86

    36bf6b5a48b2d08fc5c7aac1ec04beca


    Headers

    Imports

    Sections

  • Illegal_Services-main/README.md
  • Illegal_Services-main/Tutorial.html
    .html
  • Illegal_Services-main/lib/7za/x64/7za.dll
    .dll windows:4 windows x64 arch:x64

    22ca0a9fa52636be630f15cf36ce68e9


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x64/7za.exe
    .exe windows:4 windows x64 arch:x64

    7232d06dc00920698f0cad2452012553


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/7za/x64/7zxa.dll
    .dll windows:4 windows x64 arch:x64

    aca74ba801aaf3b47c3daa7d7e22a9db


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x86/7za.dll
    .dll windows:4 windows x86 arch:x86

    cb36a1cf1dc11c2231c4415295a85d2f


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/7za/x86/7za.exe
    .exe windows:4 windows x86 arch:x86

    1a9deef54b6b9763013f742bee84d533


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/7za/x86/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    b56c6d8dc50f73376215a3b3ddce91c0


    Headers

    Imports

    Exports

    Sections

  • Illegal_Services-main/lib/OpenFileBox.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/SaveFileBox.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/backgrounds/background-1.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-10.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-11.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-12.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-2.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-3.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-4.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-5.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-6.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-7.jpg
    .jpg
  • Illegal_Services-main/lib/backgrounds/background-8.jpg
    .jpg .ps1 polyglot
  • Illegal_Services-main/lib/backgrounds/background-9.jpg
    .jpg
  • Illegal_Services-main/lib/binread/x64/binread.exe
    .exe windows:4 windows x64 arch:x64

    94e41874fd27bb9cd79133e7f21b03b3


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/binread/x86/binread.exe
    .exe windows:4 windows x86 arch:x86

    7ab5906e263541420d9860e0e5264a71


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/bookmarks_parser.exe
    .exe windows:5 windows x86 arch:x86

    0c47e6ef010186d867803923ed98ad30


    Headers

    Imports

    Sections

  • bookmarks_parser.pyc
  • Illegal_Services-main/lib/cmdbkg.exe
    .exe windows:4 windows x86 arch:x86

    ef8cd7f18a9b59b15033fbc2e15348e2


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/cmdwiz.exe
    .exe windows:4 windows x86 arch:x86

    358255d310d10c44d53b3032e06b8b63


    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/curl/x64/curl.exe
    .exe windows:4 windows x64 arch:x64

    4cfce998a3d48ef31b71ac123f68c0ae


    Code Sign

    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/curl/x86/curl.exe
    .exe windows:4 windows x86 arch:x86

    b53be2138b8b846f28314270895351c4


    Code Sign

    Headers

    Imports

    Sections

  • Illegal_Services-main/lib/speak/EN.lang
  • Illegal_Services-main/lib/speak/FR.lang
  • Illegal_Services-main/lib/speak/extd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Illegal_Services-main/lib/speak/x64/speak-x64.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Illegal_Services-main/lib/speak/x86/speak-x86.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections