General

  • Target

    RoweHack.zip

  • Size

    20.1MB

  • MD5

    45c7676beeae164a8b3a64bb6cbdd1d7

  • SHA1

    62f3fa1eae4ccc3c88cfaddee56baf12cb48d1fd

  • SHA256

    1528bb2960361ebfda38d16b063a669f86eb06746b223d564110ec62679c1b11

  • SHA512

    91b35886f74b931853e699efd49c32b4551fc1364a61d1b80665c8ab454ae9e9c1c7e6fee4e4126ebfa705eb3add73be93d89770f01576eabdb3b845ecb40473

  • SSDEEP

    393216:XTc9kYkFV+hIWjq1W3i1CHu0wRZZUg547u6YuAyPqVZ0jSCzZWGPpHQw6hbKv:XwW+hru0iYO1RZigau67m0TzZWcqw6hM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • RoweHack.zip
    .zip

    Password: 6688

  • RoweHack/RoweHack/Lunar.dll
    .dll windows:4 windows x86 arch:x86

    Password: 6688

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RoweHack/RoweHack/Oni.dll
    .exe windows:4 windows x86 arch:x86

    Password: 6688

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RoweHack/RoweHack/Oni.runtimeconfig.json
  • RoweHack/RoweHack/RoweHack.exe
    .exe windows:4 windows x86 arch:x86

    Password: 6688

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RoweHack/RoweHack/bin/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    Password: 6688

    7164b225185485aa67b055730bc2f969


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoweHack/RoweHack/bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6688

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoweHack/RoweHack/bin/onih.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6688

    e3a21ed8205609de2593dd259b21f291


    Headers

    Imports

    Sections