General

  • Target

    4881666efcfd26c9ebbde22d7d6fde1edad147bf1df0a2d2534a3a4163a49028

  • Size

    10.4MB

  • MD5

    96d1886c0727ad9030b5010c32d9f46b

  • SHA1

    ef0e2ca843981ae5df0e56d76082abd65a656cf2

  • SHA256

    4881666efcfd26c9ebbde22d7d6fde1edad147bf1df0a2d2534a3a4163a49028

  • SHA512

    df97f8e547dad3d5be049633b4abdb62d6aa62303545c3a2f6be360609ea106f769731a4160a26347f5aa26b204c33bf29ddd40a76f11b859b31d1f4311b5029

  • SSDEEP

    196608:lAj6zLW288V7DZILyKcHYE38b8gI4goxkJoPClJQ4:jztI0Hz714xKUC/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 4881666efcfd26c9ebbde22d7d6fde1edad147bf1df0a2d2534a3a4163a49028
    .rar
  • #!~#0PeN_5098_Pa$$WOrd~!$/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    2530442c15bdf5e880f3e86bd015d2bf


    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/Setup.exe
    .exe windows:6 windows x64 arch:x64

    e8f6984829b11831577c4d66dfedf94f


    Code Sign

    Headers

    Imports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/borate.ppt
  • #!~#0PeN_5098_Pa$$WOrd~!$/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    eb9cfc22836094167bd699fc0a51bab6


    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    74f51c2177062ab2752fc871ebf0d685


    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/peptidase.htm
  • #!~#0PeN_5098_Pa$$WOrd~!$/steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/App.xbf
  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/AzureKeyVaultDgssLib.dll
    .dll windows:6 windows x64 arch:x64

    6d8ad25c4a1c6db874e4c7a09586c835


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/BugReporter
    .exe windows:6 windows x64 arch:x64

    dbc516dc79588b57876c4687775eae55


    Code Sign

    Headers

    Imports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/ComExtractor
    .exe windows:6 windows x64 arch:x64

    6527bcdc513959a2e1b9c1144e3ee285


    Code Sign

    Headers

    Imports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/HDHelper_[0MB]_[1].exe
    .exe windows:5 windows x86 arch:x86

    82a2d44124f64fef31cc8e1daa6c7ece


    Code Sign

    Headers

    Imports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/Microsoft.Toolkit.Win32.UI.XamlHost.dll
    .dll windows:6 windows x64 arch:x64

    4372b5e8b06c35af2c3b158d27f120f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/NvStereoUtilityOGL_[1MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    3eeeacdc454cd4576630513f651ad97f


    Code Sign

    Headers

    Imports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/RepackagerStartPage.xbf
  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/VSLauncher_[0MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    61cdf76393ba81a66e782c6a30558888


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/WinUiBootstrapper.dll
    .dll windows:6 windows x64 arch:x64

    f36a9647672407a81f21ebd26c499fba


    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-console-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-fibers-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    3d64c0b7659a72157d6f0180ea1141c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/encoder.dll
    .dll windows:6 windows x64 arch:x64

    af70db1387fe1f988db774c6a441fb5f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/expatai.dll
    .dll windows:6 windows x64 arch:x64

    b20a84f01b159995e771c0da4a95015d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/msvcp140_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/registryTracer64.dll
    .dll windows:6 windows x64 arch:x64

    f55d6bc6be4d4e93bf0261e8c7ab1e7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    577c6274aefd71bb684cdfc802281da3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/vcruntime140_1_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/vcruntime140_app.dll
    .dll windows:6 windows x64 arch:x64

    4a12b126db0fe5c9bcf811c54bd578c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #!~#0PeN_5098_Pa$$WOrd~!$/x64/zlibai.dll
    .dll windows:6 windows x64 arch:x64

    63e190d226d2dc9d1d395245dcb04395


    Code Sign

    Headers

    Imports

    Exports

    Sections