Resubmissions

General

  • Target

    AppFile_v4.rar

  • Size

    7.7MB

  • MD5

    30b91bd67ce610372973fc3dc144d730

  • SHA1

    f9363a7edfa6ec9901fbb04d4de465a32777cd9c

  • SHA256

    64f622a1f573000d62900a8b048d8971a9b9c8b750aa077973d9e5deb0b50d7c

  • SHA512

    45dffd0a99d685f3463164cea2a09bf701bd5b992cb35637ba37183613fcda10444cd53c45063cf52ac592ed73f330b98cd3c5b26b4c669eaca24eda96364442

  • SSDEEP

    196608:T1KDCUgw78LoGjCwJSPCEPVoJAtj/+az1ciQdUoMUQ5/fdh:TIGUn7moGCwSPrPVe6/+azdQbIdh

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • AppFile_v4.rar
    .rar
  • AppFile_v4/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppFile_v4/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppFile_v4/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • AppFile_v4/res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • AppFile_v4/res_mods/1.24.0.0/readme.txt
  • AppFile_v4/res_mods/1.25.0.0/readme.txt
  • AppFile_v4/setup.exe
    .exe windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • AppFile_v4/updates/icudtl.dat