Resubmissions

31/05/2024, 03:17

240531-dtbh8sed66 7

General

  • Target

    SetupSexyVirtual.rar

  • Size

    172.4MB

  • MD5

    049830092bafa143462c7e7e1c6bc894

  • SHA1

    f45f226afbd93b51878c7b50e28591c2d3315260

  • SHA256

    3a0fce6de68c0a34f272630305d08e4f200ababcb4f1809b41fd62ed664cd82f

  • SHA512

    3467a47d3f2621e7d363e411248144c6ca154b5d084506084ffcc0829fc345ee700793a7c7d1aa34e91d79c9c2ff1b1a8d5300e80f440b6f68fbe7443a7178e5

  • SSDEEP

    3145728:c42XGQbeGSVoW8ko3W6+fu7sGdcz2hjEUR5I89FVCfhIFEIJmxI/Rp:o2Qz7WMmruYGdFeU7I8vLyPxEp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • SetupSexyVirtual.rar
    .rar
  • SetupSexyVirtual/SetupSexyVirtual/Continuum_VIRTUAL_8Bit.dll
    .dll windows:6 windows x64 arch:x64

    a21baa00a708f8ee89ee668c37f0e8b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/Continuum_VIRTUAL_Float.dll
    .dll windows:6 windows x64 arch:x64

    978e1a1a390b59446d2083e149d2fd6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/Languages/Arabic (by nitrosfr).xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Arabic (by ogeraisi).xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/English.xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/French (by JuJu2015).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Italian (by Tommaso22) .xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Portuguese-Br (by Yhizsrhaell).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Portuguese-Eu (by Aviven).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Russian.xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Spanish (by NovaProspekt).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Spanish (by R4DBoy).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Turkish (by kellaman61).xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/Languages/Vietnamese (by comicsrovio).xml
  • SetupSexyVirtual/SetupSexyVirtual/SexyVirtual.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • SexyVirtual.exe
    .exe windows:5 windows x64 arch:x64

    d63f5598a1d901bc97000fc4b7f9e36a


    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    b3384e5182b61c941805b07b7dc28efe


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall SexyVirtual.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/SexyVirtual_3DObjects
    .dll windows:6 windows x64 arch:x64

    ae390e9d030fbc4db94e2494c9273538


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/Win64/clamp_time.ofx
    .dll windows:6 windows x64 arch:x64

    9236487dbdfde914b7a2dc5c6a1bb8e7


    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Core/Core.pima
    .zip
  • AdobePIM.dll
    .dll windows:5 windows x86 arch:x86

    bad4069efbb0fea858e33d102d409210


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Core.dll
    .dll windows:5 windows x86 arch:x86

    04e432f5160fb7636a27371c9f8ba2fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Core/Core.pimx
  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Core/Core.sig
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/LCC/LCC.pima
    .zip
  • IMSLib.dll
    .dll windows:5 windows x86 arch:x86

    40814f5b7859965691b9179df06ced28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • P7Native.dll
    .dll windows:5 windows x86 arch:x86

    cf80743055a2d0100b8134c1b6e3d72a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VulcanBridge.dll
    .dll windows:5 windows x86 arch:x86

    7ff1aabf9c9f731022064df0d33b8ed1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VulcanMessage4.dll
    .dll windows:5 windows x86 arch:x86

    fc5b54b3753cd053154301e29bc8b0a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VulcanMessage5.dll
    .dll windows:6 windows x86 arch:x86

    9612e1d064f9d31b91613782c931ed6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adobe_licensing_helper.exe
    .exe windows:6 windows x86 arch:x86

    d7168f8361a1930366bc2aa1e63d92d2


    Code Sign

    Headers

    Imports

    Sections

  • adobe_oobelib.dll
    .dll windows:5 windows x86 arch:x86

    26768dd142f6638c6ddfe8b87168ade0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adobe_upgrade.dll
    .dll windows:6 windows x86 arch:x86

    73cafe1c9aec216b9d6bcc04fd6c7570


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dispatchtable.xml
    .xml
  • imshelper.dll
    .dll windows:6 windows x86 arch:x86

    de8433e29ed52f73c31170103caee46b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/IMSLib.dll
    .dll windows:5 windows x64 arch:x64

    c2cfc0d770494af182b48ab55e9c13fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imshelper.dll
    .dll windows:6 windows x64 arch:x64

    7f02d4e63fb017a7d8cfeab1db2420be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/LCC/LCC.pimx
  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/LCC/LCC.sig
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Runtime/Runtime.pima
    .zip
  • customhook/RuntimeCustomHook.exe
    .exe windows:5 windows x86 arch:x86

    81764398f901ad8a8602ad6f62c7b111


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc10/32bit/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc10/64bit/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc12/32bit/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc12/64bit/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc13/32bit/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc13/64bit/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc14/32bit/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc14/64bit/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • customhook/vc14/winarm64bit/VCredist_arm64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Runtime/Runtime.pimx
  • SetupSexyVirtual/SetupSexyVirtual/packages/ADC/Runtime/Runtime.sig
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/readme.txt
  • SetupSexyVirtual/SetupSexyVirtual/resources/Config.xml
    .xml
  • SetupSexyVirtual/SetupSexyVirtual/resources/content/images/infiltration.gif
  • SetupSexyVirtual/SetupSexyVirtual/resources/content/images/island-rooted.jpg
    .jpg
  • SetupSexyVirtual/SetupSexyVirtual/resources/content/images/rooted-3.jpg
    .jpg
  • SetupSexyVirtual/SetupSexyVirtual/resources/content/images/rooted-4.jpg
    .jpg
  • SetupSexyVirtual/SetupSexyVirtual/resources/content/images/rooted-5.jpg
    .jpg