General

  • Target

    oxware_NE1Mo3wtSApNNX8.rar

  • Size

    3.9MB

  • MD5

    b951d53787137560d9fa748010adee91

  • SHA1

    f0d8ff7729a62caa91645711b46b802c711e1579

  • SHA256

    8f14690a54903a1d1085e9f08fd7bdd6db0c631b3440709d911cb2296837d8a5

  • SHA512

    9aff69ed70ba66c53df07051406e8316438b9f30ed724159659b79d1cf6a1babbbfd17a3630ee315c21e6e0349c5a3b0e0b89b87f8e7111df60546d2f52972e4

  • SSDEEP

    98304:Uw0ujGKn5KadVdY7I0mQgfLN8vxJ43MK9K/o:UBmj5KGVdYHmQaLaA3/K/o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • oxware_NE1Mo3wtSApNNX8.rar
    .rar

    Password: 123

  • Free Cheats.url
    .url
  • Free Hacks.url
    .url
  • README.txt
  • cheater.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    04d6d01f0d5c446f817a071f776b017e


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    da80a601d055c1908586f1fd5977dd58


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oxui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    468004bd2aba17bebd83d607c4e94d2d


    Headers

    Imports

    Exports

    Sections

  • oxware.exe
    .exe windows:6 windows x86 arch:x86

    Password: 123

    099777075a755828e735c6561a84cc3f


    Headers

    Imports

    Exports

    Sections

  • uninstall.bat
  • util.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    d9b39e7513b6e4924b8ab9e919e3720f


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    2262054530b5f8bbeb0c4e3a111a37eb


    Code Sign

    Headers

    Imports

    Exports

    Sections