General

  • Target

    file_x86x64_release.zip

  • Size

    10.7MB

  • MD5

    73ab5075c62b5627cf6e646275bc32f0

  • SHA1

    648eb3ba87cd5cd2ba66627beef3ac0255e6d3b8

  • SHA256

    57e35a9db07b372120acd222627eba20e03d4baa88d5fc098e681ddd98b31e87

  • SHA512

    a2fba085fb84d1bdcb39cb2f2d35b8058d8e6a55776904d729312f92d2d8860fcab88de15e4e1e400f99e4c530a06e2793a14520257d71a81a6fb179bcba3f44

  • SSDEEP

    196608:Em86l40MzBbR9vBiaVwRFeUWaybY+WiXW/UwHnzEsV1nrAQITSQMDy2bDj:h8I40s95wjeVkiXWskzEsnJIGQMDb

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file_x86x64_release.zip
    .zip
  • file_x86x64_release/Licenses.txt
  • file_x86x64_release/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • file_x86x64_release/file.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • file_x86x64_release/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • file_x86x64_release/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • file_x86x64_release/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • file_x86x64_release/res_mods/1.24.0.0/readme.txt
  • file_x86x64_release/res_mods/1.25.0.0/readme.txt
  • file_x86x64_release/updates/icudtl.dat