General

  • Target

    v3_file_x86x64.rar

  • Size

    6.8MB

  • MD5

    a9156a0bd435bb316530070ea542feff

  • SHA1

    acf5fda43e4b1b699bceb6dd4dc4f241352032a4

  • SHA256

    29ad7d20e6b80713f0c74d711378f1b35ec3e77bc69af90c136c9e36c6f12b56

  • SHA512

    5cff55acc5dacc26e72b72038b298b1b2aec1b4b4dd74b63b5feb81ed94023fd43c288091fa7d33be9427c5b7f8068019386cb0941c19ba34c071f5e57785cc2

  • SSDEEP

    196608:AFVmWOQbeGv/fBOqvT/bMLACYPIybJHIxsKVrY:Smf+Tv/fDfMkCYPPbJm3Y

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • v3_file_x86x64.rar
    .rar

    Password: 1234

  • Licenses.txt
  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • res_mods/1.24.0.0/readme.txt
  • res_mods/1.25.0.0/readme.txt
  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234


    Code Sign

    Headers

    Sections

  • updates/icudtl.dat