General

  • Target

    14825f879b00d56843034cb7c507b7dd927e1bcadc119ca0062dfcfdfd9b57af

  • Size

    17.8MB

  • MD5

    33f9643919a9e9bca826914f80496cfd

  • SHA1

    85deebd1f1bd1ae7e59020183317050a4da4f77d

  • SHA256

    14825f879b00d56843034cb7c507b7dd927e1bcadc119ca0062dfcfdfd9b57af

  • SHA512

    bcfd14126da3c7442b3ccc93d480974de56a75a77d6419162a0539bdd7f5f5bfce538ee84823ea38821ce3d3038215a8601d012d94baa69589939fbe9d7956e8

  • SSDEEP

    393216:Dp0sDX1QdobKcCo7E/YW6BGkzn0NqnplYOOTdu1lQ/Iw6ELQFo1WY4Hw:d0iFbW0znnSH0swQ94Q

Score
1/10

Malware Config

Signatures

Files

  • 14825f879b00d56843034cb7c507b7dd927e1bcadc119ca0062dfcfdfd9b57af
    .zip

    Password: infected

  • 1150c50902ad3963a940a1c149e3ab100528119160284d21aba78ed0e16d0125
    .zip
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    5dbcff5fdbaea5bc3093e2020d253ede


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WCLDll.dll
    .dll windows:6 windows x86 arch:x86

    09f04b8a77f4345bd6d451987e784d5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • autocompletion/DAO/state.json
  • autocompletion/libraries/libraries~00299a408.js
    .js
  • autocompletion/libraries/libraries~05c32d390.js
  • autocompletion/libraries/libraries~074e593a7.js
  • autocompletion/libraries/libraries~114e7a4e2.js
  • autocompletion/libraries/libraries~11d764003.js
  • autocompletion/libraries/libraries~13bdaad06.js
  • autocompletion/libraries/libraries~1e47f672e.js
  • autocompletion/libraries/libraries~2dcc5aaf7.js
    .js
  • autocompletion/libraries/libraries~32b5733f1.js
  • autocompletion/libraries/libraries~3fde5681b.js
  • autocompletion/libraries/libraries~4611591fd.js
  • autocompletion/libraries/libraries~4bfd2d106.js
  • autocompletion/libraries/libraries~5303f55e9.js
  • autocompletion/libraries/libraries~57063afaa.js
  • autocompletion/libraries/libraries~643d02cb5.js
  • autocompletion/libraries/libraries~697fe4635.js
  • autocompletion/libraries/libraries~7119318ec.js
  • autocompletion/libraries/libraries~8c433f51f.js
  • autocompletion/libraries/libraries~9531c3ca1.js
  • autocompletion/libraries/libraries~a5790b328.js
  • autocompletion/libraries/libraries~b0b780556.js
  • autocompletion/libraries/libraries~b89b244e2.js
  • autocompletion/libraries/libraries~c2593e398.js
  • autocompletion/libraries/libraries~c8d0b0a15.js
  • autocompletion/libraries/libraries~d147bc30b.js
  • autocompletion/libraries/libraries~d432c02e4.js
  • autocompletion/libraries/libraries~d653ab458.js
  • autocompletion/libraries/libraries~e8c5e5be4.js
    .js
  • autocompletion/libraries/libraries~ef7b14eaf.js
  • autocompletion/libraries/libraries~f380a5968.js
  • autocompletion/libraries/libraries~f78c6dc44.js
  • autocompletion/localization/friendsui_arabic-json.js
  • autocompletion/localization/friendsui_sc_schinese-json.js
  • autocompletion/localization/shared_arabic-json.js
  • autocompletion/localization/shared_brazilian-json.js
  • autocompletion/localization/shared_bulgarian-json.js
  • autocompletion/localization/shared_czech-json.js
  • autocompletion/localization/shared_danish-json.js
  • autocompletion/localization/shared_dutch-json.js
  • autocompletion/localization/shared_english-json.js
  • autocompletion/localization/shared_finnish-json.js
  • autocompletion/localization/shared_french-json.js
  • autocompletion/localization/shared_german-json.js
  • autocompletion/localization/shared_greek-json.js
  • autocompletion/localization/shared_hungarian-json.js
  • autocompletion/localization/shared_italian-json.js
  • autocompletion/localization/shared_japanese-json.js
  • autocompletion/localization/shared_koreana-json.js
  • autocompletion/localization/shared_latam-json.js
  • autocompletion/localization/shared_norwegian-json.js
  • autocompletion/localization/shared_polish-json.js
  • autocompletion/localization/shared_portuguese-json.js
  • autocompletion/localization/shared_romanian-json.js
  • autocompletion/localization/shared_russian-json.js
  • autocompletion/localization/shared_sc_schinese-json.js
  • autocompletion/localization/shared_schinese-json.js
  • autocompletion/localization/shared_spanish-json.js
  • autocompletion/localization/shared_swedish-json.js
  • autocompletion/localization/shared_tchinese-json.js
  • autocompletion/localization/shared_thai-json.js
  • autocompletion/localization/shared_turkish-json.js
  • autocompletion/localization/shared_ukrainian-json.js
  • autocompletion/localization/shared_vietnamese-json.js
  • autocompletion/localization/steampops_brazilian-json.js
  • autocompletion/localization/steampops_bulgarian-json.js
  • autocompletion/localization/steampops_czech-json.js
  • autocompletion/localization/steampops_danish-json.js
  • autocompletion/localization/steampops_dutch-json.js
  • autocompletion/localization/steampops_english-json.js
  • autocompletion/localization/steampops_finnish-json.js
  • autocompletion/localization/steampops_french-json.js
  • autocompletion/localization/steampops_german-json.js
  • autocompletion/localization/steampops_greek-json.js
  • autocompletion/localization/steampops_hungarian-json.js
  • autocompletion/localization/steampops_italian-json.js
  • autocompletion/localization/steampops_japanese-json.js
  • autocompletion/localization/steampops_koreana-json.js
  • autocompletion/localization/steampops_latam-json.js
  • autocompletion/localization/steampops_norwegian-json.js
  • autocompletion/localization/steampops_polish-json.js
  • autocompletion/localization/steampops_portuguese-json.js
  • autocompletion/localization/steampops_romanian-json.js
  • autocompletion/localization/steampops_russian-json.js
  • autocompletion/localization/steampops_schinese-json.js
  • autocompletion/localization/steampops_spanish-json.js
  • autocompletion/localization/steampops_swedish-json.js
  • autocompletion/localization/steampops_tchinese-json.js
  • autocompletion/localization/steampops_thai-json.js
  • autocompletion/localization/steampops_turkish-json.js
  • autocompletion/localization/steampops_ukrainian-json.js
  • autocompletion/localization/steampops_vietnamese-json.js
  • autocompletion/localization/steamui_arabic-json.js
  • autocompletion/localization/steamui_brazilian-json.js
  • autocompletion/localization/steamui_bulgarian-json.js
  • autocompletion/localization/steamui_czech-json.js
  • autocompletion/localization/steamui_danish-json.js
  • autocompletion/localization/steamui_dutch-json.js
  • autocompletion/localization/steamui_english-json.js
  • autocompletion/localization/steamui_finnish-json.js
  • autocompletion/localization/steamui_french-json.js
  • autocompletion/localization/steamui_german-json.js
  • autocompletion/localization/steamui_greek-json.js
  • autocompletion/localization/steamui_hungarian-json.js
  • autocompletion/localization/steamui_italian-json.js
  • autocompletion/localization/steamui_japanese-json.js
  • autocompletion/localization/steamui_koreana-json.js
  • autocompletion/localization/steamui_latam-json.js
  • autocompletion/localization/steamui_norwegian-json.js
  • autocompletion/localization/steamui_polish-json.js
  • autocompletion/localization/steamui_portuguese-json.js
  • autocompletion/localization/steamui_romanian-json.js
  • autocompletion/localization/steamui_russian-json.js
  • autocompletion/localization/steamui_sc_schinese-json.js
  • autocompletion/localization/steamui_schinese-json.js
  • autocompletion/localization/steamui_spanish-json.js
  • autocompletion/localization/steamui_swedish-json.js
  • autocompletion/localization/steamui_tchinese-json.js
  • autocompletion/localization/steamui_thai-json.js
  • autocompletion/localization/steamui_turkish-json.js
  • autocompletion/localization/steamui_ukrainian-json.js
  • autocompletion/localization/steamui_vietnamese-json.js
  • autocompletion/panorama/etc/fonts/conf.d/20-aliases-default-win.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/20-fix-cantarell.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/21-aliases-wine-win7-inf.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/30-non-latin-inf-win.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/41-repl-os-win.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/42-repl-global.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/43-repl-tt-traced-bitmap.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/44-repl-corrective.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/50-base-rendering-win7-winxp.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/60-group-non-tt-fonts.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/60-group-tt-fonts.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/61-group-non-tt-rendering-inf-7-xp-lin.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/61-group-tt-rendering-inf-7-xp.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/62-tt-monospace-rendering.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/62-tt-traced-bitmap-rendering.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/65-override.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/70-forced-synthetic.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/80-selective-rendering-inf-7-xp.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/80-selective-rendering-inf-win-lin.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/81-final-rendering-inf-7-xp.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/90-no-synthetic.conf
    .xml
  • autocompletion/panorama/etc/fonts/conf.d/90-reject.conf
    .xml
  • autocompletion/panorama/etc/fonts/fonts.conf
    .xml
  • autocompletion/panorama/etc/pango/pango.modules
  • autocompletion/panorama/panorama.dll
    .dll windows:6 windows x86 arch:x86

    5fe93d86761e61dc41642215b7db59bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • billet.php
  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    c6ca052e00ae17bd34817e5c66c25980


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • potsherd.psd
  • updater/manager/ks_tyres.ini
  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    fa315c9bc46ab41d4bc4e3f94023067f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections