Resubmissions

General

  • Target

    inst v2.zip

  • Size

    4.0MB

  • MD5

    dbe53597c1a55837405b0892d7f6db48

  • SHA1

    c0e10c03e41bc840b43c1036d63a2f0d5484a048

  • SHA256

    cef4d725d87321c99f99c50907a7c8b133190ae611ae184afbc22ad44409c1e3

  • SHA512

    2100c2a98d1c0bef9d0b2377389dc3ae190ad947186fdff00632bc5f3a78538de856e8aa5433fe47a5f3b536aa3fa5300374bcde1bd4a9929dc969bce9245ee2

  • SSDEEP

    98304:kfR+emtTx4cXNsoWtwNHaZ5LXMEirw0ATa/j17h9n+FTN45G:2R+emtF4cXN0twhA5L6rw0Dbph9nKr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • inst v2.zip
    .zip
  • inst v2/bin/jps.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jrunscript.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jshell.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jsound.dll
    .dll windows:6 windows x64 arch:x64

    2f137bbf932710886f43cecd31421a88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jstack.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jstat.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/jstatd.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/keytool.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/kinit.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/klist.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/ktab.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/lcms.dll
    .dll windows:6 windows x64 arch:x64

    d39f6c3522467369945b830a12038e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/le.dll
    .dll windows:6 windows x64 arch:x64

    01a3b1906009476f1618639783455bfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/management.dll
    .dll windows:6 windows x64 arch:x64

    17d2557fb9de6d02b5e7c5d1e588fb15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/management/jmxremote.access
  • inst v2/bin/management/jmxremote.password.template
  • inst v2/bin/management/management.properties
  • inst v2/bin/management_agent.dll
    .dll windows:6 windows x64 arch:x64

    f382dc33a1bb600fdce68160bab8019a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/management_ext.dll
    .dll windows:6 windows x64 arch:x64

    996dfdc8182d34a2a85f2f6b84e7b998


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/mlib_image.dll
    .dll windows:6 windows x64 arch:x64

    e480d9a6e1be50f86986b293f63bc23a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    9687721f5dda03d1fbed0185473c6901


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/net.dll
    .dll windows:6 windows x64 arch:x64

    750e989aba2d40d2f06647b1a0c88b54


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/nio.dll
    .dll windows:6 windows x64 arch:x64

    4b3fad25846319d02d9dcff213d75cf5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/pack200.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/prefs.dll
    .dll windows:6 windows x64 arch:x64

    06f8bf1a1d7afd55bc2cda1de621326d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/rmi.dll
    .dll windows:6 windows x64 arch:x64

    dc9601c57e12c325416881fd87a51bd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/rmic.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/rmid.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/rmiregistry.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/saproc.dll
    .dll windows:6 windows x64 arch:x64

    7390e82d74d8f6598035a4664ec6b921


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/serialver.exe
    .exe windows:6 windows x64 arch:x64

    488de7517137611a0083d4fcc6d76ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/splashscreen.dll
    .dll windows:6 windows x64 arch:x64

    5917968e5da91c99134f922fe74588f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/sunec.dll
    .dll windows:6 windows x64 arch:x64

    40d56b983847c38deceb2f55924a693b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/bin/sunmscapi.dll
    .dll windows:6 windows x64 arch:x64

    5b989e4ad00bf8318fff5eaf337cad4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/creaturecache.wdb
  • inst v2/data/Feb2010_XACT_x86.cab
    .cab
  • FEB2010_XACT_x86.inf
  • XACT3_6_x86.cat
  • XACT3_6_x86.inf
  • XACT3_6_x86_xp.inf
  • xactengine3_6.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    73f0b3cfd42e8acbc7c47caaf14b35f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst v2/data/Feb2010_XAudio_x64.cab
    .cab
  • FEB2010_XAudio_x64.inf
  • XAPOFX1_4.dll
    .dll windows:6 windows x64 arch:x64

    dae43bcd13a7d4666efa357462bb9496


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XAudio2_6.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    919a640fd051c2bbab5fdf06dfd1aac2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XAudio2_6_x64.cat
  • XAudio2_6_x64.inf
  • XAudio2_6_x64_xp.inf
  • infinst.exe
    .exe windows:6 windows x64 arch:x64

    b22a4f669312ee374cb26a4eb9e4098a


    Headers

    Imports

    Sections

  • inst v2/data/Feb2010_XAudio_x86.cab
    .cab
  • FEB2010_XAudio_x86.inf
  • XAPOFX1_4.dll
    .dll windows:6 windows x86 arch:x86

    a3a674b1b02986f74e6f1f4671ca62fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XAudio2_6.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    3f01b646c2444455f7233e736b73c9c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XAudio2_6_x86.cat
  • XAudio2_6_x86.inf
  • XAudio2_6_x86_xp.inf
  • inst v2/data/Layout/BSpacer.html
    .html
  • inst v2/data/Layout/CSpacer.html
    .html
  • inst v2/data/Layout/Detector.js
    .js
  • inst v2/data/Layout/Greeting.html
  • inst v2/data/Layout/Index.html
    .html
  • inst v2/data/Layout/LBorder.html
    .html
  • inst v2/data/Layout/Nav.html
    .html
  • inst v2/data/Layout/RBorder.html
    .html
  • inst v2/data/Layout/Requirements.html
    .html
  • inst v2/data/Layout/Splash.html
  • inst v2/data/Layout/Styles.css
  • inst v2/data/Layout/StylesLeft.css
  • inst v2/data/Layout/TBorder.html
    .html
  • inst v2/data/Layout/TheScript.js
    .js
  • inst v2/data/Troubleshooting/(Mac)AudioProblems.html
  • inst v2/data/Troubleshooting/(Mac)BlizzardDownloaderProblems.html
  • inst v2/data/Troubleshooting/(Mac)ConnectionLoginProblems.html
  • inst v2/data/Troubleshooting/(Mac)GameplayProblems.html
  • inst v2/data/Troubleshooting/(Mac)Install.html
  • inst v2/data/Troubleshooting/(Mac)PreventiveMaintenance.html
    .html
  • inst v2/data/Troubleshooting/(Mac)StartupProblems.html
  • inst v2/data/Troubleshooting/(Mac)TroubleshootingMenu.html
  • inst v2/data/Troubleshooting/(Mac)VideoProblems.html
  • inst v2/data/Troubleshooting/(PC)AudioProblems.html
  • inst v2/data/Troubleshooting/(PC)BlizzardDownloaderProblems.html
  • inst v2/data/Troubleshooting/(PC)ConnectionLoginProblems.html
  • inst v2/data/Troubleshooting/(PC)GameplayProblems.html
  • inst v2/data/Troubleshooting/(PC)Install.html
  • inst v2/data/Troubleshooting/(PC)PreventiveMaintenance.html
  • inst v2/data/Troubleshooting/(PC)StartupProblems.html
  • inst v2/data/Troubleshooting/(PC)TroubleshootingMenu.html
  • inst v2/data/Troubleshooting/(PC)VideoProblems.html
  • inst v2/data/launcher.mv.db
  • inst v2/exeRUN.exe
    .exe windows:6 windows x86 arch:x86

    02a32319c1a5805c42ff71c370a0c784


    Code Sign

    Headers

    Imports

    Sections

  • inst v2/gameobjectcache.wdb
  • inst v2/itemtextcache.wdb
  • inst v2/setupRUN.exe
    .exe windows:6 windows x86 arch:x86

    02a32319c1a5805c42ff71c370a0c784


    Code Sign

    Headers

    Imports

    Sections