General

  • Target

    NeverLose.cc.zip

  • Size

    15.0MB

  • MD5

    465798880049c997b8b4955de6354d0f

  • SHA1

    34353c363b67098e4055f18e27d38ac793b86829

  • SHA256

    a18327f59bbbcee8cc13e52cecc3a198021c56ca6dfccb17f5b8020c915916af

  • SHA512

    b959c424a4bf5cf05fc6e28e298ba2f8dc40e82de9b43db87f1ea4bd5efb3632c14f0d1edddc5a1dbe1adeadf031dbf3ec769015865d64221ad75625584a0737

  • SSDEEP

    393216:ZFpudKNYJCcz/7t54RJLWXZNb62+9N0PgBmw8qOKs5m:ZWKNyv/7t56gd+v04BzY5m

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverLose.cc.zip
    .zip

    Password: 123

  • Neverlose.cc/Guide READ ME!!!!.txt
  • Neverlose.cc/NeverLose.exe
    .exe windows:6 windows x86 arch:x86

    Password: 123

    02a32319c1a5805c42ff71c370a0c784


    Headers

    Imports

    Sections

  • Neverlose.cc/cfg/Legit.cfg
  • Neverlose.cc/cfg/Rage.cfg
  • Neverlose.cc/data/debug.txt
  • Neverlose.cc/data/project.xml
    .xml
  • Neverlose.cc/data/remote_settings.ini
  • Neverlose.cc/dll/Load.dll
  • Neverlose.cc/dll/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qdds.dll
    .dll windows:6 windows x86 arch:x86

    0edd12175abd0668f206c00bc96d8e3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    d8a3f00ff3fbc59dba9d847ac221e7e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    5e67e8efb78e2d874e73df5b5beeb926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    b418eeffb2227f3d84fb9a4085d4d42c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    0e3ad0d48dcb1ea61669a0d68f51f6a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    3d2f3c44f0af62ed5c93b2157431d832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    4a8bc838930a6747ad2f370dde6f5ced


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    c82aefc4c1a131f898f9d67fa8a9d63d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    9ba7981e73e6b29d40b5068912326eeb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    8d8a902193cfbf207d772df08cedf025


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/translations/qt_ca.qm
  • Neverlose.cc/translations/qt_cs.qm
  • Neverlose.cc/translations/qt_de.qm
  • Neverlose.cc/translations/qt_en.qm
  • Neverlose.cc/translations/qt_fi.qm
  • Neverlose.cc/translations/qt_fr.qm
  • Neverlose.cc/translations/qt_he.qm
  • Neverlose.cc/translations/qt_hu.qm
  • Neverlose.cc/translations/qt_it.qm
  • Neverlose.cc/translations/qt_ja.qm
  • Neverlose.cc/translations/qt_ko.qm
  • Neverlose.cc/translations/qt_lv.qm
  • Neverlose.cc/translations/qt_ru.qm
  • Neverlose.cc/translations/qt_sk.qm
  • Neverlose.cc/translations/qt_uk.qm