Resubmissions

24/05/2024, 15:49

240524-s9vz5sbd88 7

General

  • Target

    wares-main.zip

  • Size

    66.9MB

  • MD5

    892aa69dcb3c66724cfff1c9f2357892

  • SHA1

    e8e30589fb3f6d6e104da4275b2076a1c9163247

  • SHA256

    c62a18c512d1689d5179f97783f78b920e7dcc37e95b1eb67e75c041542dfc7d

  • SHA512

    02dee401c58539c03fb36574cf9f711b84a5a45df11b790aad456b6ea047926dc67d681c0e2cd84e962066a7dd3b4656aad158a202d3d68dfcd7726d31f80efd

  • SSDEEP

    1572864:6jufmg7jufmgIjz9RWjooyvmlu+jm1Fa6FHZ5AkNc66DEJ:elgHlgYnWUqjmzBHZs66DEJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • wares-main.zip
    .zip
  • wares-main/.zcompdump
  • wares-main/.zsh_history
  • wares-main/Ext2IFS_1_10b.exe
    .exe windows:4 windows x86 arch:x86

    0b6247a1e2de3e1475b35f711d13f379


    Headers

    Imports

    Sections

  • wares-main/FDhelp
  • wares-main/INSCD
    .sh linux
  • wares-main/INSNFS
    .sh linux
  • wares-main/INSdir
    .sh linux
  • wares-main/INSfd
    .sh linux
  • wares-main/INShd
    .sh linux
  • wares-main/PROMPThelp
  • wares-main/README
  • wares-main/SeTDOS
    .sh linux
  • wares-main/SeTPKG
    .sh linux
  • wares-main/SeTconfig
    .sh linux
  • wares-main/SeTfdHELP
    .sh linux
  • wares-main/SeTfull
    .sh linux
  • wares-main/SeTkernel
    .sh linux
  • wares-main/SeTkeymap
    .sh linux
  • wares-main/SeTmaketag
    .sh linux
  • wares-main/SeTmedia
    .sh linux
  • wares-main/SeTnopart
  • wares-main/SeTpartitions
    .sh linux
  • wares-main/SeTpasswd
    .sh linux
  • wares-main/SeTswap
    .sh linux
  • wares-main/WPSettings.dat
  • wares-main/a.txt
  • wares-main/a.txt:ads.txt
  • wares-main/at_quick_exit.oS
    .elf linux x86
  • wares-main/atexit.oS
    .elf linux x86
  • wares-main/b.txt
  • wares-main/b.txt:ads.txt
  • wares-main/badblocks
    .elf linux x86
  • wares-main/blkid
    .elf linux x86
  • wares-main/brc
    .sh linux
  • wares-main/busybox
    .elf linux x86
  • wares-main/cfdisk
    .sh linux
  • wares-main/cfdisk.bin
    .elf linux x86
  • wares-main/chattr
    .elf linux x86
  • wares-main/comm
    .elf linux x86
  • wares-main/cut
    .elf linux x86
  • wares-main/debugfs
    .elf linux x86
  • wares-main/df.bin
    .elf linux x86
  • wares-main/dialog
    .elf linux x86
  • wares-main/dialogrc
  • wares-main/dir:ads.txt
  • wares-main/disk2
  • wares-main/dumpe2fs
    .elf linux x86
  • wares-main/e2fsck
    .elf linux x86
  • wares-main/e2image
    .elf linux x86
  • wares-main/ehci-hcd.o.gz
    .gz
  • ehci-hcd.o
    .elf linux x86
  • wares-main/eject
    .elf linux x86
  • wares-main/evdev.o.gz
    .gz
  • evdev.o
    .elf linux x86
  • wares-main/fdisk
    .sh linux
  • wares-main/fdisk.bin
    .elf linux x86
  • wares-main/filesize
    .sh linux
  • wares-main/floss
    .elf linux x64
  • wares-main/floss (copy 1)
    .elf linux x64
  • wares-main/foobar.exe
  • wares-main/fsck
    .elf linux x86
  • wares-main/fsck.ext2
    .sh linux
  • wares-main/fsck.ext3
    .sh linux
  • wares-main/func.py
  • wares-main/grep.bin
    .elf linux x86
  • wares-main/group
  • wares-main/gzip.bin
    .elf linux x86
  • wares-main/hc_sl811.o.gz
    .gz
  • hc_sl811.o
    .elf linux x86
  • wares-main/hdparm
    .elf linux x86
  • wares-main/hid.o.gz
    .gz
  • hid.o
    .elf linux x86
  • wares-main/hosts
  • wares-main/hotplug
    .elf linux x86
  • wares-main/idea.dll
    .dll windows:4 windows x86 arch:x86

    3c20011523b8276de328099c0b9f60d4


    Headers

    Imports

    Exports

    Sections

  • wares-main/ieee1394.o.gz
    .gz
  • ieee1394.o
    .elf linux x86
  • wares-main/initrd.img
  • wares-main/inittab
  • wares-main/input.o.gz
    .gz
  • input.o
    .elf linux x86
  • wares-main/insmod
    .elf linux x86
  • wares-main/installpkg
    .sh linux
  • wares-main/ipmask
    .elf linux x86
  • wares-main/issue
  • wares-main/itl-logo.txt
  • wares-main/jfs_mkfs
    .elf linux x86
  • wares-main/joydev.o.gz
    .gz
  • joydev.o
    .elf linux x86
  • wares-main/keybdev.o.gz
    .gz
  • keybdev.o
    .elf linux x86
  • wares-main/keymaps.tar.gz
    .gz
  • wares-main/klogd
    .elf linux x86
  • wares-main/ld-2.3.1.so
    .elf linux x86
  • wares-main/ld.so.cache
  • wares-main/ldd
  • wares-main/ldlinux.sys
  • wares-main/lft
  • wares-main/libBrokenLocale-2.3.1.so
    .elf linux x86
  • wares-main/libanl-2.3.1.so
    .elf linux x86
  • wares-main/libblkid.so.1.0
    .elf linux x86
  • wares-main/libc-2.3.1.so
    .elf linux x86
  • wares-main/libc6-i386_2.11.1-0ubuntu7.11_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.11.1-0ubuntu7.12_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.11.1-0ubuntu7.21_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.12.1-0ubuntu10.4_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.12.1-0ubuntu6_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.13-0ubuntu13.2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.13-0ubuntu13_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.13-20ubuntu5.2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.13-20ubuntu5.3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.13-20ubuntu5_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.15-0ubuntu10.18_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.15-0ubuntu10_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.15-0ubuntu20.2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.15-0ubuntu20_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.17-0ubuntu5.1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.17-0ubuntu5_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.17-93ubuntu4_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.19-0ubuntu6.15_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.19-0ubuntu6_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.19-10ubuntu2.3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.19-10ubuntu2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.19-18+deb8u10_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.21-0ubuntu4.3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.21-0ubuntu4_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.23-0ubuntu10_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.23-0ubuntu11_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.23-0ubuntu11_amd64.symbols
  • wares-main/libc6-i386_2.23-0ubuntu3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.23-0ubuntu3_amd64.symbols
  • wares-main/libc6-i386_2.24-11+deb9u4_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.24-11+deb9u4_amd64.symbols
  • wares-main/libc6-i386_2.24-3ubuntu1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.24-3ubuntu1_amd64.symbols
  • wares-main/libc6-i386_2.24-3ubuntu2.2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.24-3ubuntu2.2_amd64.symbols
  • wares-main/libc6-i386_2.24-9ubuntu2.2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.24-9ubuntu2.2_amd64.symbols
  • wares-main/libc6-i386_2.24-9ubuntu2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.24-9ubuntu2_amd64.symbols
  • wares-main/libc6-i386_2.26-0ubuntu2.1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.26-0ubuntu2.1_amd64.symbols
  • wares-main/libc6-i386_2.26-0ubuntu2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.26-0ubuntu2_amd64.symbols
  • wares-main/libc6-i386_2.27-3ubuntu1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.27-3ubuntu1_amd64.symbols
  • wares-main/libc6-i386_2.28-0ubuntu1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.28-0ubuntu1_amd64.symbols
  • wares-main/libc6-i386_2.28-10_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.28-10_amd64.symbols
  • wares-main/libc6-i386_2.29-0ubuntu2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.29-0ubuntu2_amd64.symbols
  • wares-main/libc6-i386_2.3.6-0ubuntu20.6_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.3.6-0ubuntu20.6_amd64.symbols
  • wares-main/libc6-i386_2.3.6-0ubuntu20_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.3.6-0ubuntu20_amd64.symbols
  • wares-main/libc6-i386_2.30-0ubuntu2.1_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.30-0ubuntu2.1_amd64.symbols
  • wares-main/libc6-i386_2.30-0ubuntu2_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.30-0ubuntu2_amd64.symbols
  • wares-main/libc6-i386_2.30-4_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.30-4_amd64.symbols
  • wares-main/libc6-i386_2.31-0ubuntu6_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.31-0ubuntu6_amd64.symbols
  • wares-main/libc6-i386_2.4-1ubuntu12.3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.4-1ubuntu12.3_amd64.symbols
  • wares-main/libc6-i386_2.4-1ubuntu12_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.4-1ubuntu12_amd64.symbols
  • wares-main/libc6-i386_2.5-0ubuntu14_amd64.symbols
  • wares-main/libc6-i386_2.6.1-1ubuntu10_amd64.symbols
  • wares-main/libc6-i386_2.6.1-1ubuntu9_amd64.symbols
  • wares-main/libc6-i386_2.8~20080505-0ubuntu7_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.8~20080505-0ubuntu9_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.9-4ubuntu6.3_amd64.so
    .elf linux x86
  • wares-main/libc6-i386_2.9-4ubuntu6_amd64.so
    .elf linux x86
  • wares-main/libcom_err.so.2.1
    .elf linux x86
  • wares-main/libcrypt-2.3.1.so
    .elf linux x86
  • wares-main/libdl-2.3.1.so
    .elf linux x86
  • wares-main/libe2fsim.1.2.1.so
    .elf linux x86
  • wares-main/libe2p.so.2.3
    .elf linux x86
  • wares-main/libext2fs.so.2.4
    .elf linux x86
  • wares-main/libgpm.so.1.18.0
    .elf linux x86
  • wares-main/libm-2.3.1.so
    .elf linux x86
  • wares-main/libmemusage.so
    .elf linux x86
  • wares-main/libncurses.so.5.3
    .elf linux x86
  • wares-main/libnsl-2.3.1.so
    .elf linux x86
  • wares-main/libnss_dns-2.3.1.so
    .elf linux x86
  • wares-main/libnss_files-2.3.1.so
    .elf linux x86
  • wares-main/libpcprofile.so
    .elf linux x86
  • wares-main/libproc.so.2.0.16
    .elf linux x86
  • wares-main/libpthread-0.10.so
    .elf linux x86
  • wares-main/libresolv-2.3.1.so
    .elf linux x86
  • wares-main/librt-2.3.1.so
    .elf linux x86
  • wares-main/libss.so.2.0
    .elf linux x86
  • wares-main/libthread_db-1.0.so
    .elf linux x86
  • wares-main/libutil-2.3.1.so
    .elf linux x86
  • wares-main/libuuid.so.1.2
    .elf linux x86
  • wares-main/linux
  • wares-main/linux-basic
  • wares-main/linux-c
  • wares-main/linux-c-nc
  • wares-main/linux-koi8
  • wares-main/linux-koi8r
  • wares-main/linux-lat
  • wares-main/linux-m
  • wares-main/linux-nic
  • wares-main/lisa
  • wares-main/lisaterm
  • wares-main/lisaterm-w
  • wares-main/liswb
  • wares-main/ln03
  • wares-main/ln03-w
  • wares-main/login.defs
  • wares-main/logsave
    .elf linux x86
  • wares-main/lorem.txt
  • wares-main/lpr
  • wares-main/ls
    .elf linux x86
  • wares-main/lsattr
    .elf linux x86
  • wares-main/lsraid
    .elf linux x86
  • wares-main/luna
  • wares-main/makedevs.sh
    .sh linux
  • wares-main/migrate.sh
    .sh linux
  • wares-main/mkdosfs
    .elf linux x86
  • wares-main/mke2fs
    .elf linux x86
  • wares-main/mkfs.xfs
    .elf linux x86
  • wares-main/mklost+found
    .elf linux x86
  • wares-main/mkraid
    .elf linux x86
  • wares-main/mkreiserfs
    .elf linux x86
  • wares-main/modules.dep
  • wares-main/modules.generic_string
  • wares-main/modules.ieee1394map
  • wares-main/modules.isapnpmap
  • wares-main/modules.parportmap
  • wares-main/modules.pcimap
  • wares-main/mount
    .elf linux x86
  • wares-main/mousedev.o.gz
    .gz
  • wares-main/mtools.conf
  • wares-main/network
    .sh linux
  • wares-main/networks
  • wares-main/no_ads.txt
  • wares-main/nopartHELP
  • wares-main/notes.txt
  • wares-main/notes.txt:ads
  • wares-main/nsswitch.conf
  • wares-main/obex-check-device
    .elf linux x64
  • wares-main/obex_find
    .elf linux x64
  • wares-main/obex_tcp
    .elf linux x64
  • wares-main/obex_test
    .elf linux x64
  • wares-main/obexautofs
    .elf linux x64
  • wares-main/obexfs
    .elf linux x64
  • wares-main/obexftp
    .elf linux x64
  • wares-main/obexftpd
    .elf linux x64
  • wares-main/obexstress
    .sh linux
  • wares-main/ohci1394.o.gz
    .gz
  • wares-main/passwd
  • wares-main/paste
    .elf linux x86
  • wares-main/patch_tc
  • wares-main/pciide.sys
    .sys windows:6 windows x64 arch:x64

    5c68d74ecab536bbd7b7f6c3b318a88d


    Code Sign

    Headers

    Imports

    Sections

  • wares-main/pcmcia
    .sh linux
  • wares-main/pe_template.dat
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections

  • wares-main/pivot_root
    .elf linux x86
  • wares-main/pkgtool
    .sh linux
  • wares-main/printf
    .elf linux x86
  • wares-main/probe
    .sh linux
  • wares-main/profile
  • wares-main/ps
    .elf linux x86
  • wares-main/pt_chown
    .elf linux x86
  • wares-main/pthread_atfork.oS
    .elf linux x86
  • wares-main/raidreconf
    .elf linux x86
  • wares-main/raidstart
    .elf linux x86
  • wares-main/random1
  • wares-main/random1.sys
  • wares-main/random2
  • wares-main/rdev
    .elf linux x86
  • wares-main/reiserfsck
    .elf linux x86
  • wares-main/removepkg
    .sh linux
  • wares-main/resize2fs
    .elf linux x86
  • wares-main/rpc.portmap
    .elf linux x86
  • wares-main/sbp2.o.gz
    .gz
  • wares-main/securetty
  • wares-main/sed
    .elf linux x86
  • wares-main/services
  • wares-main/services.db
  • wares-main/setterm
    .elf linux x86
  • wares-main/setup
    .sh linux
  • wares-main/shadow
  • wares-main/shells
  • wares-main/sl811.o.gz
    .gz
  • wares-main/slackinstall
    .sh linux
  • wares-main/sort
    .elf linux x86
  • wares-main/stack_chk_fail_local.oS
    .elf linux x86
  • wares-main/stage2
  • wares-main/std
  • wares-main/stdcrt
  • wares-main/strings
    .elf linux x86
  • wares-main/syslinux
    .elf linux x86
  • wares-main/syslinux.cfg
  • wares-main/syslog.conf
  • wares-main/systemd-resolved
    .elf linux x64
  • wares-main/tar-1.13
    .elf linux x86
  • wares-main/termcap
  • wares-main/truecrypt.sys
    .sys windows:6 windows x86 arch:x86

    2e4d26342802c4f33d87be78a025b47b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wares-main/tune2fs
    .elf linux x86
  • wares-main/uhci.o.gz
    .gz
  • wares-main/umount
    .elf linux x86
  • wares-main/unmigrate.sh
    .sh linux
  • wares-main/usb-ohci.o.gz
    .gz
  • wares-main/usb-storage.o.gz
    .gz
  • wares-main/usb-uhci.o.gz
    .gz
  • wares-main/usbcore.o.gz
    .gz
  • wares-main/usbkbd.o.gz
    .gz
  • wares-main/usbmouse.o.gz
    .gz
  • wares-main/uuidgen
    .elf linux x86
  • wares-main/vanilla
  • wares-main/vc303
  • wares-main/vc303a
  • wares-main/vc404
  • wares-main/vc404-s
  • wares-main/vc414
  • wares-main/vc415
  • wares-main/verout.2a8940aa422294e73de
  • wares-main/vmlinuz.img
  • wares-main/vremote
  • wares-main/vt100
  • wares-main/vt100-nav
  • wares-main/vt100-nav-w
  • wares-main/vt100-s
  • wares-main/vt100-s-bot
  • wares-main/vt100-vb
  • wares-main/vt100-w
  • wares-main/vt100-w-nam
  • wares-main/vt100nam
  • wares-main/vt102
  • wares-main/vt102-nsgr
  • wares-main/vt102-w
  • wares-main/vt300
  • wares-main/winpmem-amd64.sys
    .sys windows:6 windows x64 arch:x64

    e3ff1810a59a5bd7a538a74e0935cbac


    Code Sign

    Headers

    Imports

    Sections

  • wares-main/winpmem-i386.sys
    .sys windows:6 windows x86 arch:x86

    626a3893ab6476d89b5e3b4716468a83


    Code Sign

    Headers

    Imports

    Sections

  • wares-main/zgrep
    .sh linux
  • wares-main/入乡随俗 海外春节别样过法.txt