General

  • Target

    URjACQH.rar

  • Size

    8.7MB

  • MD5

    f603255e3c286f058b0a56861d5bd3f4

  • SHA1

    528620923264d6c4e6a9ff4ec5a51e5f8bf5bb66

  • SHA256

    0b11f042cdc4f01b7b8b55da256c2a44728a58698aa15eabd7f3893823b8824c

  • SHA512

    c7951273592ce8eca4cf6e33a03aca015e02a8a5f5f3cc61f7905a19d90b79bccfcad29afdef1dcb38f955b92524d385e93f1211a5b9d3fcb0bf88d6bfa93b94

  • SSDEEP

    196608:jX6qIMhBybC4WnmwXhdmL9PQtUXQtNhEW9:zEMC4nmShO/AKm

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • URjACQH.rar
    .rar
  • Alumina.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Alumina.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Alumina.runtimeconfig.json
  • Alumina/Scripts/ballspin.lua
  • Alumina/Scripts/infjump.lua
  • Alumina/Scripts/infyield.lua
  • Alumina/Scripts/infyieldripoff.lua
    .js
  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WebView2Loader.dll
    .dll windows:5 windows x64 arch:x64

    3fd78a8f50b85b627af2d0fc485b5e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Wpf.Ui.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • bin/path.txt
  • bin/version.txt
  • cd57e4c171d6e8f5ea8b8f824a6a7316.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • cpr.dll
    .dll windows:6 windows x64 arch:x64

    7bc8b32667f209b178f1f0635b6ee0d5


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    9a4ddbe07217dde8376bb7c577388155


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ws2_32.dll
    .dll windows:10 windows x64 arch:x64

    6eee61ef7874aa59d1a3452c72e61d5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    9434905d51e7bf5f119cc9e5ee85d0da


    Headers

    Imports

    Exports

    Sections