General

  • Target

    woof.rar

  • Size

    11.3MB

  • MD5

    6bcd238742d17e472b6f2590b7c1c5e9

  • SHA1

    1feaa65214fa34e46bb3675396b277d95e9295e0

  • SHA256

    2197f354ddd5c7a25138843d027b22503a471d93117498cd3ae299bcaed64cac

  • SHA512

    a28617063ba26f8b18496fdf7b2e30179b36223c2a0c511fdd746fae23ab997e60c7fe08d7c4c56583e1efe665459f6fb298de6cfe1575b7776303eeec5ee139

  • SSDEEP

    196608:ZUMqxV28Hm6DLvJHM7z9meHDWzVV2GPMtzGIGDEnmRVvq7IGc9ypNeoUPEWT6U:zqxVxm6BHYpSvMqI9Mq7tc9ejWT6U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • woof.rar
    .rar
  • woof/Check serials/check.bat
  • woof/DMI/DMI16.EXE
  • woof/DMI/DMIEDIT.EXE
    .exe windows:6 windows x64 arch:x64

    9bbd972bee7030506f62236dff565e85


    Headers

    Imports

    Sections

  • woof/DMI/amifldrv64.sys
    .sys windows:6 windows x64 arch:x64

    363922cc73591e60f2af113182414230


    Code Sign

    Headers

    Imports

    Sections

  • woof/EFI/ChgLogo.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/Compress.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/afuefix64.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/amideefix64.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/efi/boot/BOOTX64.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/efi/boot/startup.nsh
  • woof/EFI/flash2.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • woof/EFI/imageM1U.ROM
  • woof/EFI/logo.nsh
    .vbs
  • woof/TMac/TMACv6.0.7_Setup.exe
    .exe windows:4 windows x86 arch:x86

    a8fd72e864d14b8484dd49e800fd3a36


    Headers

    Imports

    Sections

  • woof/Volume ID/volid.exe
    .exe windows:6 windows x86 arch:x86

    18b31546654757186c18a83004821b2a


    Headers

    Imports

    Sections