General

  • Target

    AppFile_v2.zip

  • Size

    9.4MB

  • MD5

    a0ef62adc7dec5bfeb351041b585c1bf

  • SHA1

    a80a1b0118c17a79ced4bcfa5d8ea417c91f7073

  • SHA256

    3398dbbf50b9564ef0195c4c89980dc9d9255e482b48a3a6ea4e2d368283538b

  • SHA512

    69ffbe8f67543999018175e446e13183099393b9bdcc2a107cf490307aeee6cc135a0bbd7c407b9db890bdd14ccb0f3c5f8fdf2c36b10655d938a24b35bbaf67

  • SSDEEP

    196608:V7miIg6FU5DZvuXwQNgx8/B9fS4NqntEzLLIOCOBAwDbMqUgh6YJP:V7d65XwQNV5pXgKzvIOCqDIc1

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • AppFile_v2.zip
    .zip
  • AppFile_v2/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppFile_v2/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppFile_v2/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • AppFile_v2/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • AppFile_v2/res_mods/1.24.0.0/readme.txt
  • AppFile_v2/res_mods/1.25.0.0/readme.txt
  • AppFile_v2/setup.exe
    .exe windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • AppFile_v2/updates/icudtl.dat